Peoplesoft Enterprise Fin Payables
Monthly
Unauthenticated data disclosure in Oracle PeopleSoft Enterprise FIN Payables 9.2 (Security component) lets a remote attacker reach financial data over HTTP without credentials, yielding read access to critical or all data the Payables module can reach. The Oracle-supplied tag of 'Authentication Bypass' aligns with the CVSS PR:N vector, indicating the flaw circumvents access controls. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but its low complexity and network reach make it a credible target once details from the July 2026 CPU are studied.
Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Unauthenticated data disclosure in Oracle PeopleSoft Enterprise FIN Payables 9.2 (Security component) lets a remote attacker reach financial data over HTTP without credentials, yielding read access to critical or all data the Payables module can reach. The Oracle-supplied tag of 'Authentication Bypass' aligns with the CVSS PR:N vector, indicating the flaw circumvents access controls. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but its low complexity and network reach make it a credible target once details from the July 2026 CPU are studied.
Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.