Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft Enterprise

CVE-2023-22047

githubexploit · 2026-08-15

Description

CVE-2023-22047: unauthenticated LFI in Oracle PeopleSoft PeopleTools allows arbitrary file read.

Affected Oracle Peoplesoft Enterprise versions

Oracle Peoplesoft Enterprise= 8.59, 8.60

All known vulnerabilities by product

Peoplesoft Enterprise Peopletools

CVSS 7.5 for CVE-2023-22047

7.5

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Working code

61%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

77.0%higher than 99.5% of all CVEs

Updated 2026-08-15

Exploit Details

Modified:2026-08-15 17:14

Last Seen:2026-08-15 17:20

Reporter:0xTerror

Other exploits for CVE-2023-22047

Exploit for Missing Authentication for Critical Function in Oracle Peoplesoft_Enterprise

2025-04-02 tuo4n8GITHUB

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=D56D7973-1929-593A-8A98-8A9ED672E757
# CVE-2023-22047---Oracle-PeopleSoft-LFI
CVE-2023-22047 is a critical unauthenticated Local File Inclusion (LFI) vulnerability in Oracle PeopleSoft Enterprise PeopleTools. This exploit allows an attacker to read arbitrary files from the target server without any authentication.

Exploit Code

Share

Share on social media: