An attacker who has low-level access to the infrastructure that hosts Oracle PeopleSoft Enterprise FIN Inventory Brazil can exploit a flaw in the Inventory component to perform unauthorized update, insert, or delete operations against the application data. The vulnerability also allows the attacker to trigger a partial denial of service of the application. The impact is confined to integrity and availability, with no known confidentiality impact, and is rated as CVSS 3.1 Base Score 4.4.

The affected product is Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1. No other versions or vendors are currently listed as impacted.

The attack vector is local; the attacker must have a logon to the infrastructure where the application runs and requires low privilege. No exploit probability (EPSS) is available, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score indicates moderate risk with limited impact on integrity and availability, and the lack of broader exposure means the threat is narrower than enterprise-wide exploits.