A vulnerability in Oracle PeopleSoft Enterprise FIN General Ledger Brazil allows an attacker who has low‑privilege access to the infrastructure where the application runs to perform unauthorized insert, update, or delete operations on accessible data, as well as to induce a partial denial of service. The weakness is an improper access control flaw that permits privileged data manipulation and interruption of application availability.

Oracle PeopleSoft Enterprise FIN General Ledger Brazil version 9.1 is affected. The product is delivered under the Oracle PeopleSoft suite and is known to run on infrastructure that must be protected by strict access controls.

The CVSS 3.1 base score of 4.4 indicates moderate impact on integrity and availability. The EPSS score is < 1%, indicating a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower risk of widespread exploitation. The likely attack vector is an authenticated, low‑privileged user within the organization’s network who logs into the same infrastructure that hosts PeopleSoft. Successful exploitation results in unauthorized data changes and intermittent service disruption, but it does not provide remote code execution or high‑privilege escalation.