Sample Security Audit Report

Oracle EBS Security Audit

Comprehensive security posture assessment of an Oracle E-Business Suite R12.1.3 production instance. 75 findings across 10 audit domains generated by the open-source offline scanner analyzing 20 CSV data exports.

Instance
EBSPROD
Host
dbhost01.acmecorp.com
EBS Release
12.1.3 (Extended Support)
Database
Oracle 12c R1 (12.1.0.2.0)
Scan Date
2026-03-31
Scanner
oracle_ebs_offline_scanner v1.0.0

Finding Summary

7
Critical
37
High
20
Medium
9
Low
2
Info
18.7
/ 100

Security Posture F — Critical

This environment exhibits severe security deficiencies. 7 critical findings require immediate action: terminated employees retain active access, audit trails are disabled, unlimited brute-force login attempts are allowed, DBA roles are over-provisioned, and remote OS authentication is enabled. 37 high-severity issues compound the risk across access controls, SoD violations, HTTPS configuration, and unpatched components.

Findings by Category

Detailed Findings

Showing 75 of 75

Compliance Mapping

SOX
SoD controls, access reviews, audit trail, approval workflows
CIS Oracle DB
Database hardening, password policies, PUBLIC privileges
NIST 800-53
AC, AU, IA, CM control families
PCI-DSS v4.0
Req 7 (access), Req 8 (auth), Req 10 (logging)
HIPAA
Access, audit, and authentication controls
ISO 27001
A.9 Access, A.12 Operations, A.18 Compliance