Vulnerability in Product Configurator of Oracle PeopleSoft Enterprise FIN
CVE-2026-91553

4.4MEDIUM

Key Information:

Vendor

Oracle
Status
Peoplesoft Enterprise Fin Product Configurator Brazil
Vendor
CVE Published:
20 October 2026

What is CVE-2026-91553?

A vulnerability exists in the PeopleSoft Enterprise FIN Product Configurator Brazil of Oracle PeopleSoft, which could be exploited by low-privileged attackers who have logon access to the infrastructure. If successfully exploited, this vulnerability could permit unauthorized updates, inserts, or deletions of accessible data within the system, along with a potential partial denial of service. Organizations using the affected version must assess their exposure and implement appropriate security measures to mitigate risks.

Affected Version(s)

PeopleSoft Enterprise FIN Product Configurator Brazil 9.1

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.