Executive brief
Oracle PeopleSoft Enterprise FIN Inventory Brazil is a financial management module used to track inventory for Brazilian operations. A vulnerability allows a low-privilege user with local system access to gain complete control of the application, potentially exposing or modifying sensitive financial and inventory data.
Technical details
An easily exploitable privilege escalation vulnerability exists in the Inventory component of Oracle PeopleSoft Enterprise FIN Inventory Brazil version 9.1. The vulnerability requires local system access and a valid logon credential with low privileges. A successful exploit allows an attacker to achieve complete compromise of the application, including the ability to read, modify, and delete data. The vulnerability is locally accessible (AV:L) with low attack complexity and no user interaction required (AC:L/UI:N). No patch information is available at this time.
Affected products
- Oracle PeopleSoft Enterprise FIN Inventory Brazil 9.1
Timeline
- 2026-09-15: disclosed