The flaw in the Integration component of Oracle PeopleSoft Enterprise FIN Manufacturing Brazil lets an attacker who is logged into the host environment make unauthorized updates, inserts or deletes of application data and cause a partial denial of service. Because the problem is local and requires only low privileges, the attacker can damage business information integrity and disrupt availability for the affected system. The vulnerability is identified by a CVSS 3.1 base score of 4.4, indicating moderate risk primarily for integrity and availability with no effect on confidentiality.

Oracle Corporation’s PeopleSoft Enterprise FIN Manufacturing Brazil, version 9.1. This version is listed as vulnerable in the October 2026 Oracle CPU advisory. No other versions or products are mentioned as affected.

With a CVSS score of 4.4 the risk level is moderate, and the EPSS score of < 1% indicates a very low likelihood of exploitation. The vulnerability is not cataloged in the CISA KEV database, suggesting no publicly known exploits. The likely attack path is a local attacker who can log into the machine running PeopleSoft. Because the flaw relies on local compromise and low privilege, organizations that maintain strong local access controls and promptly apply the available fix are effectively protected.