CVE-2023-22047

🗓️ 18 Jul 2023 20:18:30Reported by oracleType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 321 Views🌐 WEB

Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (Portal component) 8.59 and 8.60 allows unauthorized access to critical data

Reporter	Title	Published	Views	Family All 22
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise	2 Apr 202503:54	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise	15 Aug 202617:22	–	githubexploit
GithubExploit	Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise	15 Aug 202617:13	–	githubexploit
BDU FSTEC	PeopleSoft Enterprise PeopleTools Disclosure	24 Jul 202300:00	–	bdu_fstec
Circl	CVE-2023-22047	19 Jul 202300:36	–	circl
CNNVD	Oracle PeopleSoft Enterprise PeopleTools 安全漏洞	18 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-22047	18 Jul 202320:18	–	cvelist
Kitploit	CVE-2023-22047---Oracle-PeopleSoft-LFI	10 Oct 202620:51	–	kitploit
Kitploit	CVE-2023-22047-Oracle-PeopleSoft-LFI	12 Oct 202612:48	–	kitploit
Kitploit	CVE-2023-22047	16 Oct 202603:52	–	kitploit

NVD

Vulners

Node

oracle peoplesoft_enterpriseMatch8.59

oracle peoplesoft_enterpriseMatch8.60

[
  {
    "vendor": "Oracle Corporation",
    "product": "PeopleSoft Enterprise PT PeopleTools",
    "versions": [
      {
        "version": "8.59",
        "status": "affected"
      },
      {
        "version": "8.60",
        "status": "affected"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujul2023.html

Parameter	Position	Path	Description	CWE
wsrp-url	query param	/RP	Unauthenticated Local File Inclusion via wsrp-url parameter in /RP endpoint (GET).	CWE-22

17 Jun 2026 05:34Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.7698

SSVC

CWE-306