CVE-2021-35689

· CRITICALModified

← All CVEs

CVSS v3.1

9.8

EPSS

2.12%

Published

Feb 24, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to perform remote code execution on Taleo Enterprise Edition system. Successful attacks of this vulnerability can result in unauthorized remote code execution within Taleo Enterprise Edition and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. All affected customers were notified of CVE-2021-35689 by Oracle.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products (1)

oracle · talent_acquisition_cloudvulnerable

References (2)

https://www.oracle.com/security-alerts/oracle-cves-outside-other-oracle-public-documents.html

Permissions RequiredVendor Advisory

https://www.oracle.com/security-alerts/oracle-cves-outside-other-oracle-public-documents.html

Permissions RequiredVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs