An Oracle PeopleSoft Enterprise HCM Global Payroll Switzerland vulnerability with a CVSS 3.1 base score of 4.2 allows an attacker who already has logged on to the hosting infrastructure to modify, insert or delete payroll data, read protected information and trigger a partial denial of service by leveraging improper authorization controls that grant high‑privileged users access beyond their intended scope.

Oracle Corporation’s PeopleSoft Enterprise HCM Global Payroll Switzerland, version 9.2, is affected. No other versions or product variants are listed as impacted.

The CVSS score of 4.2 indicates moderate severity. The vulnerability is local and requires an attacker with a logged‑in high‑privileged account on the PeopleSoft host to exploit it. The EPSS score of < 1% indicates a very low, but nonzero probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, so publicly reported exploitation is absent. Nonetheless, if local privilege escalation is possible, the attacker could alter payroll records, leak sensitive employee data or disrupt payroll processing, posing significant risk to confidentiality, integrity and availability.