PT-2022-2438 · Oracle · Oracle Talent Acquisition Cloud

Published 2022-02-22 · Updated 2022-03-02 · CVE-2021-35689

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Talent Acquisition Cloud - Taleo Enterprise Edition (affected versions not specified)

Description The issue is related to errors in the code of the Oracle Talent Acquisition Cloud, which can be exploited by a remote attacker to execute arbitrary code. This can result in unauthorized remote code execution and potentially cause a partial denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2022-02843

CVE-2021-35689

Affected Products

Oracle Talent Acquisition Cloud

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-35689 · Security Note
• https://bdu.fstec.ru/vul/2022-02843 · Security Note
• https://oracle.com/security-alerts/oracle-cves-outside-other-oracle-public-documents.html · Vendor Advisory