Vulnerability in Oracle PeopleSoft Enterprise FIN Product Configurator Brazil allows a low‑privileged attacker who has logged on to the infrastructure to gain unauthorized update, insert or delete access to data handled by the system and to cause a partial denial of service. The flaw is a local privilege escalation that affects data integrity and availability rather than confidentiality.

Oracle PeopleSoft Enterprise FIN Product Configurator Brazil, version 9.1, is impacted. No other versions or products are listed as affected.

The CVSS 3.1 base score of 4.4 indicates moderate impact with low to moderate exploitability. The EPSS score is unavailable, and the vulnerability is not listed in CISA’s KEV catalog, suggesting a lower current threat but still requiring attention. The likely attack vector is a local attacker who has legitimate or compromised low‑privileged access to the PeopleSoft environment; such an attacker can use the flaw to modify data or disrupt service. The risk is amplified in environments with weak role‑based access controls or inadequate segregation of duties.