Product
CVE-2023-22047 allows unauthenticated attackers to perform arbitrary file reads via the wsrp-url parameter in Oracle PeopleSoft Enterprise PeopleTools.