U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CIS Oracle Database 19c Benchmark 1.2.0 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Oracle Database 19c cpe:/a:oracle:database_server:19c (View CVEs)

Checklist Highlights

Checklist Name:
CIS Oracle Database 19c Benchmark
Checklist ID:
965
Version:
1.2.0
Type:
Compliance
Review Status:
Final
Authority:
Third Party: Center for Internet Security (CIS)
Original Publication Date:
09/21/2020

Checklist Summary:

This document is intended to address the recommended security settings for Oracle Database 19c. This guide was tested against Oracle Database 19c installed with and without pluggable database support running on a Windows Server instance as a stand-alone system and running on an Oracle Linux instance also as a stand-alone system. Future Oracle Database 19c critical patch updates (CPUs) may impact the recommendations included in this document. To obtain the latest version of this guide, please visit http://benchmarks.cisecurity.org. If you have questions, comments, or have identified ways to improve this guide, please write us at feedback@cisecurity.org.

Checklist Role:

  • Database Server

Known Issues:

Not provided.

Target Audience:

This benchmark is intended for system and application administrators, security specialists, auditors, help desk, and platform deployment personnel who plan to develop, deploy, assess, or secure solutions that incorporate Oracle Database 19c on Oracle Linux or Microsoft Windows Server.

Target Operational Environment:

  • Managed

Testing Information:

This guide was tested against Oracle Database 19c installed with and without pluggable database support running on a Windows Server instance as a stand-alone system and running on an Oracle Linux instance also as a stand-alone system.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Please see the below link for our current terms of use: https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Product Support:

feedback@cisecurity.org

Point of Contact:

feedback@cisecurity.org

Sponsor:

Not provided.

Licensing:

Please see the below link for our current terms of use: https://www.cisecurity.org/cis-securesuite/cis-securesuite-membership-terms-of-use/

Change History:

update to FINAL - 10/26/2020
updated status to FINAL - 11/30/2020
updated benchmark per CIS - 2/22/24

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 02/22/2024