Executive brief
Oracle PeopleSoft Enterprise FIN Engineering Brazil is a financial and engineering management application used by organizations for project accounting and cost tracking. A local privilege escalation vulnerability allows a low-privileged user with access to the infrastructure to gain complete control of the application, potentially exposing or modifying sensitive financial data and engineering records.
Technical details
This is a local privilege escalation vulnerability in the Engineering component of Oracle PeopleSoft Enterprise FIN Engineering Brazil version 9.1. The vulnerability is easily exploitable and requires low-level privileges and local logon access to the infrastructure where the application runs. Successful exploitation allows an attacker to achieve complete compromise of the application, resulting in high-impact unauthorized access to confidential data, system integrity violation, and potential availability disruption. No user interaction is required for exploitation. Oracle has assigned CVSS score 7.8 to reflect these impacts.
Affected products
- Oracle PeopleSoft Enterprise FIN Engineering Brazil 9.1
Timeline
- 2026-09-15: disclosed