DISA_Oracle_Database_19c_STIG_v1r1.audit from DISA Oracle Database 19c STIG v1r1

O19C-00-000200 - Oracle Database must protect against or limit the effects of organization-defined types of denial-of-service (DoS) attacks.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-270496r1064766_rule

STIG-ID|O19C-00-000200

Vuln-ID|V-270496

O19C-00-006000 - Oracle Database must provide an immediate real-time alert to appropriate support staff of all audit log failures.

800-53|AU-5(2)

CCI|CCI-001858

Rule-ID|SV-270509r1065202_rule

STIG-ID|O19C-00-006000

Vuln-ID|V-270509

O19C-00-007300 - Oracle Database must support enforcement of logical access restrictions associated with changes to the database management system (DBMS) configuration and to the database itself.

800-53|CM-5(1)

CCI|CCI-001813

Rule-ID|SV-270512r1065305_rule

STIG-ID|O19C-00-007300

Vuln-ID|V-270512

O19C-00-009900 - The Oracle Listener must be configured to require administration authentication.

800-53|CM-6b.

CAT|I

CCI|CCI-000366

Rule-ID|SV-270531r1065272_rule

STIG-ID|O19C-00-009900

Vuln-ID|V-270531

O19C-00-011200 - Network access to Oracle Database must be restricted to authorized personnel.

Rule-ID|SV-270539r1064895_rule

STIG-ID|O19C-00-011200

Vuln-ID|V-270539

O19C-00-011500 - The /diag subdirectory under the directory assigned to the DIAGNOSTIC_DEST parameter must be protected from unauthorized access.

Rule-ID|SV-270541r1065276_rule

STIG-ID|O19C-00-011500

Vuln-ID|V-270541

O19C-00-011600 - Remote administration must be disabled for the Oracle connection manager.

Rule-ID|SV-270542r1064904_rule

STIG-ID|O19C-00-011600

Vuln-ID|V-270542

O19C-00-011700 - Network client connections must be restricted to supported versions.

Rule-ID|SV-270543r1064907_rule

STIG-ID|O19C-00-011700

Vuln-ID|V-270543

O19C-00-011800 - Database administrator (DBA) OS accounts must be granted only those host system privileges necessary for the administration of the Oracle Database.

Rule-ID|SV-270544r1065278_rule

STIG-ID|O19C-00-011800

Vuln-ID|V-270544

O19C-00-013200 - OS accounts used to run external procedures called by Oracle Database must have limited privileges.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-270555r1065222_rule

STIG-ID|O19C-00-013200

Vuln-ID|V-270555

O19C-00-013400 - Access to external executables must be disabled or restricted.

Rule-ID|SV-270557r1065281_rule

STIG-ID|O19C-00-013400

Vuln-ID|V-270557

O19C-00-014900 - If passwords are used for authentication, the Oracle Database must transmit only encrypted representations of passwords.

800-53|IA-5(1)(c)

CCI|CCI-000197

Rule-ID|SV-270565r1064973_rule

STIG-ID|O19C-00-014900

Vuln-ID|V-270565

O19C-00-015200 - Oracle Database, when using public key infrastructure (PKI)-based authentication, must enforce authorized access to the corresponding private key.

800-53|IA-5(2)(b)

CCI|CCI-000186

Rule-ID|SV-270566r1064976_rule

STIG-ID|O19C-00-015200

Vuln-ID|V-270566

O19C-00-015500 - Oracle Database must use NIST-validated FIPS 140-2/140-3 compliant cryptography for authentication mechanisms.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-270569r1065205_rule

STIG-ID|O19C-00-015500

Vuln-ID|V-270569

O19C-00-017700 - Oracle Database must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.

800-53|SC-8(2)

CCI|CCI-002420

Rule-ID|SV-270579r1065015_rule

STIG-ID|O19C-00-017700

Vuln-ID|V-270579

O19C-00-020400 - Oracle Database must include only approved trust anchors in trust stores or certificate stores managed by the organization.

800-53|SC-17

CCI|CCI-004909

Rule-ID|SV-270589r1065045_rule

STIG-ID|O19C-00-020400

Vuln-ID|V-270589

Detections

Analytics

DISA Oracle Database 19c STIG v1r1 Unix

Audit Details

File Details

Audit Changelog

No revisions found