The vulnerability arises when a high‑privileged user with local access to the infrastructure where PeopleSoft Enterprise FIN Cash Management runs can manipulate data within the Cash Management component. This flaw permits an attacker to perform unauthorized updates, inserts, or deletes on data, read protected information, and cause a partial denial of service. The weakness is a classic example of improper access control that undermines confidentiality, integrity, and availability.

Affected are Oracle Corporation’s PeopleSoft Enterprise FIN Cash Management version 9.2. No other versions are listed. The product is used in financial environments for cash and accounting processing.

The CVSS base score is 3.8 indicating low severity, and the vector shows local access with high privileges and a required user interaction. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog, which suggests a low probability of public exploitation at this time. However, because the flaw allows critical data tampering on systems that already trust high‑privileged accounts, an organization with active use of this application should assess the risk and consider tightening controls.