CVE-2026-91465

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) in the Staffing component. Affects version 9.1. Easily exploitable by a low-privileged attacker with network access via HTTP, potentially leading to takeover of the component and impacting additional products (scope change). CVSS 9.9.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) in the eProcurement component. Affects version 9.1. Easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to unauthorized creation, deletion, or modification of critical data and unauthorized access to all data. CVSS 9.1.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (component: Integration) version 9.1. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability, leading to unauthorized access to critical data, data modification, and partial denial of service. Attacks may impact additional products (scope change).

Vulnerability in Oracle PeopleSoft Enterprise FIN Common Objects Argentina (component Asset Management) version 9.1. A high-privileged attacker with network access via HTTP can, with user interaction, create, delete, or modify critical data, gain full access to it, and cause a partial denial of service.

Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle PeopleSoft, component eProcurement. Affects version 9.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via HTTP to compromise the system.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Oracle PeopleSoft) component Staffing. Version 9.1 is affected. A low-privileged attacker with network access via HTTP can compromise this product.

Vulnerability in PeopleSoft Enterprise FIN Common Objects Argentina (Cash Management component). An unauthenticated attacker via HTTP can cause partial DOS.