Peoplesoft Enterprise Fin Cash Management
Monthly
Full compromise of Oracle PeopleSoft Enterprise FIN Cash Management 9.2 is possible by a low-privileged user who already has logon access to the infrastructure hosting the application. Because the flaw carries a scope change, a successful attack can pivot beyond the Cash Management module to significantly impact additional Oracle products, resulting in complete takeover of the affected component. Fixed in the Oracle July 2026 Critical Patch Update; no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthorized data compromise in Oracle PeopleSoft Enterprise FIN Cash Management 9.2 allows a remote, unauthenticated attacker to read, create, delete, or modify all data accessible to the Cash Management component over HTTP. The flaw carries a scope change, meaning a successful attack can significantly impact products beyond Cash Management itself. No public exploit identified at time of analysis; the CVSS 3.1 base score is 8.7 driven by high confidentiality and integrity impact, though the vector rates exploitation as difficult (AC:H).
Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Full compromise of Oracle PeopleSoft Enterprise FIN Cash Management 9.2 is possible by a low-privileged user who already has logon access to the infrastructure hosting the application. Because the flaw carries a scope change, a successful attack can pivot beyond the Cash Management module to significantly impact additional Oracle products, resulting in complete takeover of the affected component. Fixed in the Oracle July 2026 Critical Patch Update; no public exploit identified at time of analysis and the flaw is not listed in CISA KEV.
Unauthorized data compromise in Oracle PeopleSoft Enterprise FIN Cash Management 9.2 allows a remote, unauthenticated attacker to read, create, delete, or modify all data accessible to the Cash Management component over HTTP. The flaw carries a scope change, meaning a successful attack can significantly impact products beyond Cash Management itself. No public exploit identified at time of analysis; the CVSS 3.1 base score is 8.7 driven by high confidentiality and integrity impact, though the vector rates exploitation as difficult (AC:H).
Vulnerability in the PeopleSoft Enterprise FIN Cash Management product of Oracle PeopleSoft (component: Cash Management). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.