1. Oracle Database Security Assessment Tool User Guide
  2. Oracle Database Security Assessment Report - Database Security Basics

Oracle Database Security Assessment Report - Database Security Basics

The Oracle Database Security Assessment Report - Database Security Basics section contains the following information:

SectionFinding IDDescriptionLink(s)
Database Version-Displays the version of the database assessed by the Collector and Reporter. Includes security options used and database startup time.-
Security Features Utilized-Displays the security features and indicates if they are in use.-
Patch CheckINFO.PATCH

Displays information about the patches installed and the CVEs the database is exposed to.

  • Oracle AI Database (on-premises):

    It is vital to keep the database software up-to-date with security fixes as they are released. Oracle issues comprehensive patches in the form of Release Updates on a regular quarterly schedule. Patch Set Updates and Bundle Patches were available for database versions up to 12.1.0.2.

  • Oracle Autonomous AI Database:

    Oracle Autonomous AI Databases offer varying degrees of flexibility for deferring maintenance and patching activities. To view the next scheduled maintenance window, navigate to the Autonomous AI Database details page in the OCI console and check the Next Maintenance field for the start and end times. Operating databases on outdated RUs results in an unsupported and high-risk security posture, increasing exposure to known exploits and compliance violations.

The following figure displays an example of the Oracle Database Security Assessment Report - Database Security Basics section.

Database Security Basics

Description of the illustration Database Security Basics

The following figure illustrates a scenario where the latest Release Update (RU) has not been applied, leaving the database exposed to known security vulnerabilities:

INFO.PATCH

Description of the illustration INFO.PATCH