Executive brief
PeopleSoft Enterprise FIN Common Objects Brazil is a financial management module used by large organizations to manage accounting and financial processes. A vulnerability in this product allows a privileged attacker with network access to completely compromise the system, potentially exposing sensitive financial data, manipulating transaction records, and disrupting business operations.
Technical details
This is a remote code execution vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Brazil affecting version 9.1. The vulnerability is easily exploitable and requires a high-privileged attacker with network access via T3 or IIOP protocols. The vulnerable component is the Common Objects module. Successful exploitation results in complete takeover of the system, affecting confidentiality, integrity, and availability. A patch should be available through Oracle's security update channels.
Affected products
- Oracle PeopleSoft Enterprise FIN Common Objects Brazil 9.1
Timeline
- 2026-08-18: disclosed