The vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina (Asset Management component) permits a high‑privileged attacker who can reach the application over HTTP to create, delete, or modify critical data, or to interfere with the availability of the application. The flaw requires human interaction from a user other than the attacker, indicating that the attacker must trick a legitimate user into performing an action that triggers the vulnerability. Because the attacker already has high privileges within the network, the impact includes unauthorized access to all data exposed by the application and the ability to cause a partial denial of service.

Affected product is Oracle PeopleSoft Enterprise FIN Common Objects Argentina version 9.1. This version is the one listed by Oracle as vulnerable. No other releases were mentioned as impacted.

The CVSS score of 6.4 (medium) reflects confidentiality, integrity, and availability impacts. The exploitation requires network access over HTTP, low attacker effort, high privilege, and user interaction, meaning this flaw could be exploited by anyone with local network access who can persuade a user to act. The EPSS score is not available, and this vulnerability is not listed in CISA’s KEV, suggesting it may not yet have known public exploits. Nevertheless, because it enables unauthorized data manipulation and service disruption, the risk remains significant and should be mitigated promptly.