Description
Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise PeopleSoft Enterprise FIN Common Objects Argentina. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Common Objects Argentina accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Published: 2026-10-20
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Confidential data exposure
Action: Patch ASAP
AI Analysis

Impact

A flaw in Oracle PeopleSoft Enterprise FIN Common Objects Argentina allows an unauthenticated attacker who can reach the Oracle Net interface to compromise the application, enabling unauthorized view of critical data. The vulnerability is rated CVSS 3.1 base score 7.5 with a high confidentiality impact, indicating that sensitive information could be read by an attacker without authentication or user interaction.

Affected Systems

Oracle PeopleSoft Enterprise FIN Common Objects Argentina, version 9.1, the only supported release mentioned in the advisory.

Risk and Exploitability

The vulnerability is easily exploitable from any system with network connectivity to the Oracle Net interface; no credentials, no UI interaction, and no local access are required. With an EPSS score of <1% and absence from the CISA KEV catalog, the specific probability of exploitation is not well established, but the medium‑to‑high CVSS score signals a serious risk if an attacker can reach the target. Immediate remediation is advisable to prevent potential data breaches.

Generated by OpenCVE AI on October 24, 2026 at 06:22 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Oracle PeopleSoft security patch for Enterprise FIN Common Objects Argentina 9.1 as soon as it is available.
  • Restrict Oracle Net traffic to the application to trusted hosts or subnets using firewall or ACL rules to limit exposure to the public network.
  • Enable and monitor detailed audit logging for PeopleSoft, looking for unauthenticated access attempts or anomalies, and investigate any suspicious events.

Generated by OpenCVE AI on October 24, 2026 at 06:22 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 24 Oct 2026 05:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Oracle Net Access Allows Confidential Data Exposure in PeopleSoft Enterprise FIN Common Objects Argentina
Weaknesses CWE-284
CWE-287

Sat, 24 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-200
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 13:15:00 +0000

Type Values Removed Values Added
Title Unauthenticated Oracle Net Access Allows Confidential Data Exposure in PeopleSoft Enterprise FIN Common Objects Argentina
Weaknesses CWE-284
CWE-287

Tue, 20 Oct 2026 21:30:00 +0000

Type Values Removed Values Added
Description Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft (component: Integration). The supported version that is affected is 9.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise PeopleSoft Enterprise FIN Common Objects Argentina. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Common Objects Argentina accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
First Time appeared Oracle
Oracle peoplesoft Enterprise Fin Common Objects Argentina
CPEs cpe:2.3:a:oracle:peoplesoft_enterprise_fin_common_objects_argentina:9.1:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle peoplesoft Enterprise Fin Common Objects Argentina
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Oracle Peoplesoft Enterprise Fin Common Objects Argentina
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-10-24T03:08:48.564Z

Reserved: 2026-09-14T22:10:16.636Z

Link: CVE-2026-91465

cve-icon Vulnrichment

Updated: 2026-10-24T03:08:42.285Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-20T22:20:50.220

Modified: 2026-10-24T04:18:22.500

Link: CVE-2026-91465

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-24T06:30:09Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor