Oracle Security Blog 
Log4j Vulnerabilities Impact On Oracle E-Business Suite - Updated Information
Multiple significant security vulnerabilities (CVE-2021-44228, CVE-2021-45046, and CVE-2021-4104) have been disclosed and patched in the popular Java logging library Apache Log4j. This library is installed in Oracle E-Business Suite (EBS)...Upcoming Webinar: Oracle Database 21c New Security Features
Thursday, January 28, 2021 - 2:00 pm to 3:00 pm EST Oracle Database 21c has been released and is the latest innovation release of the Oracle Database. A number of new security features are included with this release and should be...Upcoming Webinar: Oracle E-Business Suite Security for Auditors
Oracle E-Business Suite Security for Auditors Thursday, December 17, 2020 - 2:00 pm to 3:00 pm EST Auditors are trained to understand the financial aspects and the end user functionality of Oracle E-Business Suite. However, most auditors have...Upcoming Webinar: Is Your Sensitive Data Playing Hide and Seek with You?
Is Your Sensitive Data Playing Hide and Seek with You? Thursday, December 12, 2019 - 2:00 pm EST Your Oracle databases and ERP applications may contain sensitive personal data like Social Security numbers, credit card numbers, addresses, date...CVE-2019-2638, CVE-2019-2633, Oracle Payday Vulnerabilities - AppDefend Protection
Two Oracle E-Business Suite security vulnerabilities (CVE-2019-2638, CVE-2019-2633) fixed in April 2019 Oracle Critical Patch Update (CPU) have been recently publicized. These vulnerabilities allow an attacker to execute arbitrary SQL statements in...Integrigy at COLLABORATE 19 - Oracle E-Business Suite Security, Database Security, PeopleSoft Security
Heading to COLLABORATE 19? For the 12th consecutive year, Integrigy will be presenting on Oracle E-Business security, Oracle Database security, and PeopleSoft security. If you will be attending, be sure to schedule in one or more of our...Oracle Critical Patch Update July 2018 Oracle PeopleSoft Analysis and Impact
As with almost all previous Oracle E-Business Suite Critical Patch Updates (CPU), the July 2018 quarterly patch is significant and high-risk for PeopleSoft applications. Despite the publicity, marketing, or naming of specific vulnerabilities,...Oracle Critical Patch Update July 2018 Oracle E-Business Suite Analysis and Impact
As with almost all previous Oracle E-Business Suite Critical Patch Updates (CPU), the July 2018 quarterly patch is significant and high-risk. 51 of the past 55 quarterly patches are significant and...CVE-2017-10151 Oracle Identity Manager Vulnerability
Oracle has released an out-of-cycle security advisory (CVE-2017-10151) for a vulnerability affecting Oracle Identity Manager. This vulnerability has a CVSS 3.0 base score of 10 out of 10. Oracle Identity Manager is the identity...Oracle Critical Patch Update October 2017 Oracle E-Business Suite Analysis and Impact
As with almost all previous Oracle E-Business Suite Critical Patch Updates (CPU), the October 2017 quarterly patch is significant and high-risk. 47 of the past 52 quarterly patches are significant and high-risk as they fix one or...Integrigy at Oracle Open World 2017
Integrigy will be presenting again this year on database security at Oracle Open World 2017 (San Francisco, October 1-5). If you will be attending Open World, please join us for this informative session on database security. The Thrifty DBA...Oracle Critical Patch Update July 2017 Oracle E-Business Suite Analysis
First, this CPU with 78 EBS security fixes has 10x the number of EBS security fixes than an average CPU. For the previous 44 CPUs released since 2005, an average of 7.5 security bugs are fixed per quarter for EBS. Second, there are a...SCAP OVAL SQL57_TEST Example For Oracle E-Business Suite
Last week I posted a blog introducing SCAP and OVAL. Here is a quick follow-up with a link to a sql57_test example using the Oracle E-Business Suite - it will suffice for any Oracle database. A great book to read first on SCAP titled ‘...STIGS, SCAP, OVAL, Oracle Databases and ERP Security
Last week’s unprecedented ransomware cyber attacks (http://preview.tinyurl.com/lhjfjgk) caught me working through some research on security automation. The cyber attacks evidently were attributed to an unpatched Windows XP vulnerability. When...Oracle E-Business Suite APPS_NE Security Risks
The most recent version of the Oracle E-Business Suite, Release 12.2, introduces on-line patching to reduce downtime requirements. This new technical functionality is based on Edition-based redefinition provided by the Oracle 11gR2 database. For the...