An error occurred:

Oracle Database 12c STIG

Oracle Database 12c Security Technical Implementation Guide

ID Vuln ID Title Cat Status
O121-BP-022800 V-219839 Application role permissions must not be assigned to the Oracle PUBLIC role. Cat II
O121-BP-022900 V-219840 Oracle application administration roles must be disabled if not required and authorized. Cat II
O121-BP-023000 V-219841 Connections by mid-tier web and application systems to the Oracle DBMS from a DMZ or external network must be encrypted. Cat II
O121-BP-023100 V-219842 Database job/batch queues must be reviewed regularly to detect unauthorized database job submissions. Cat II
O121-BP-023200 V-219843 Unauthorized database links must not be defined and active. Cat II
O121-BP-023300 V-219844 Sensitive information from production database exports must be modified before import to a development database. Cat II
O121-BP-023600 V-219847 Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace. Cat II
O121-BP-023700 V-219848 Application owner accounts must have a dedicated application tablespace. Cat II
O121-BP-023800 V-219849 The directories assigned to the LOG_ARCHIVE_DEST* parameters must be protected from unauthorized access. Cat II
O121-BP-023900 V-219850 The Oracle _TRACE_FILES_PUBLIC parameter if present must be set to FALSE. Cat II
O121-BP-024100 V-219852 DBMS production application and data directories must be protected from developers on shared production/development DBMS host systems. Cat II
O121-BP-024200 V-219853 Use of the DBMS installation account must be logged. Cat II
O121-BP-024750 V-265879 Oracle database products must be a version supported by the vendor. Cat I
O121-BP-025100 V-219861 The DBMS data files, transaction logs and audit files must be stored in dedicated directories or disk partitions separate from software or other application files. Cat II
O121-BP-025101 V-219862 The directory assigned to the AUDIT_FILE_DEST parameter must be protected from unauthorized access and must be stored in a dedicated directory or disk partition separate from software or other application files. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.