← Back

Taleo Platform

taleo_platform

Vendor: Oracle • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-45105
5Apache
DebianNetapp+2 more
1166bk1602 0aa12 0tp0 Firmware
6bk1602 0aa22 0tp0 Firmware6bk1602 0aa32 0tp0 Firmware+113 more
Jun 17, 2026
Dec 18, 2021
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data t...Show more
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.Show less
CVE-2021-42340
4Apache
DebianNetapp+1 more
18Agile Engineering Data Management
Big Data Spatial And GraphCommunications Diameter Signaling Router+15 more
Jun 17, 2026
Oct 14, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade conne...Show more
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.Show less