1. Oracle Database Security Assessment Tool Release Notes
  2. Changes In This Release For Oracle Database Security Assessment Tool

Changes in This Release for Oracle Database Security Assessment Tool

The Oracle Database Security Assessment Tool 4.3 (Jul 2026) release has been updated to detect CVEs from the latest Critical Patch Update for Oracle Database versions 19c, 21c, and 26ai.

The Oracle Database Security Assessment Tool supports Oracle AI Database 26ai and Oracle Autonomous AI Databases.

DBSAT 4.3 enhances the INFO.PATCH finding to detect unpatched CVEs from the Critical Patch Update – July 2026 for Oracle Database 19c, 21c, and 26ai, enabling identification and remediation of unpatched databases.

Note:

The Reporter component of DBSAT requires Oracle JDK 17 at minimum. However, Oracle recommends that you use Oracle JDK 21 or later for optimal performance.