Peoplesoft Lease Administration
Monthly
Local privilege abuse in PeopleSoft Enterprise FIN Lease Administration 9.2 enables a low-privileged attacker with infrastructure logon access to bypass authorization controls and achieve full confidentiality and integrity compromise of financial lease data. The vulnerability carries a scope change, meaning successful exploitation can cascade into additional PeopleSoft products beyond the directly targeted Lease Administration component, amplifying the impact across the ERP environment. No public exploit code has been identified at time of analysis; Oracle disclosed this in the August 2026 Critical Patch Update advisory.
Local privilege abuse in PeopleSoft Enterprise FIN Lease Administration 9.2 enables a low-privileged attacker with infrastructure logon access to bypass authorization controls and achieve full confidentiality and integrity compromise of financial lease data. The vulnerability carries a scope change, meaning successful exploitation can cascade into additional PeopleSoft products beyond the directly targeted Lease Administration component, amplifying the impact across the ERP environment. No public exploit code has been identified at time of analysis; Oracle disclosed this in the August 2026 Critical Patch Update advisory.