CVE-2021-35689 is a vulnerability in Oracle Talent Acquisition Cloud
Published on February 24, 2022
A potential vulnerability in the Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. This high severity potential vulnerability allows attackers to perform remote code execution on Taleo Enterprise Edition system. Successful attacks of this vulnerability can result in unauthorized remote code execution within Taleo Enterprise Edition and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Talent Acquisition Cloud - Taleo Enterprise Edition. All affected customers were notified of CVE-2021-35689 by Oracle.
Vulnerability Analysis
CVE-2021-35689 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.
Products Associated with CVE-2021-35689
Want to know whenever a new CVE is published for Oracle Talent Acquisition Cloud? stack.watch will email you.
Affected Versions
Oracle Corporation Oracle Talent Acquisition Cloud - Taleo Enterprise Edition Version * is affected by CVE-2021-35689Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.