Lucene search

OracleCVE-2021-35689

HistoryFeb 24, 2022 - 3:15 a.m.

CVE-2021-35689

2022-02-2403:15:43

oracle

web.nvd.nist.gov

cve-2021-35689

oracle

talent acquisition cloud

taleo enterprise edition

vulnerability

remote code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to perform remote code execution on Taleo Enterprise Edition system. Successful attacks of this vulnerability can result in unauthorized remote code execution within Taleo Enterprise Edition and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. All affected customers were notified of CVE-2021-35689 by Oracle.

Affected configurations

Nvd

Node

oracletalent_acquisition_cloudMatch-taleo_enterprise

VendorProductVersionCPE
oracletalent_acquisition_cloud-cpe:2.3:a:oracle:talent_acquisition_cloud:-:*:*:*:taleo_enterprise:*:*:*

Vendor	Product	Version	CPE
oracle	talent_acquisition_cloud	-	cpe:2.3:a:oracle:talent_acquisition_cloud:-::::taleo_enterprise:::

CNA Affected

[
  {
    "product": "Oracle Talent Acquisition Cloud - Taleo Enterprise Edition",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  }
]

References

www.oracle.com/security-alerts/oracle-cves-outside-other-oracle-public-documents.html

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.006

Percentile

78.3%

JSON

Related for CVE-2021-35689