Vulnerability in Oracle PeopleSoft Cash Management Product
CVE-2026-91485

3.8LOW

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Fin Cash Management
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91485?

A vulnerability exists in Oracle's PeopleSoft Enterprise FIN Cash Management product that could allow a high-privileged attacker to compromise the application. This vulnerability affects version 9.2 of the Cash Management component and is particularly challenging to exploit, requiring human interaction from an individual other than the attacker. Successful exploitation can lead to unauthorized data manipulation, including updates, inserts, or deletions, as well as unauthorized read access to sensitive data. There is also a risk of causing a partial denial of service, affecting the availability of the Cash Management application. For more details, refer to the Oracle Advisory.

Affected Version(s)

PeopleSoft Enterprise FIN Cash Management 9.2

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
3.8
Severity:
LOW
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.