Details

Maintaining the currency of the software version protects the database from known vulnerabilities.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Apply the most current Oracle Critical Patch update to the database software when available.

Follow vendor-provided patch installation instructions.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Database_11g_Y21M10_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Windows.

References

• 800-53|SI-2c.
• CAT|II
• Rule-ID|SV-24342r1_rule
• STIG-ID|DG0003-ORACLE11
• Vuln-ID|V-5659

Source

• Tenable.com/audits