what is the security mechanism for prevent the malicious file to be uploaded in the content server

Summary:

How to prevent the business user/supplier to upload any malicious file to be uploaded? Any Virus scanner ?if yes, then please share artifacts or document.

Content (please ensure you mask any confidential information):

This is part of our company audit. Auditor raising this queries, as Oracle only restricted the access ,if user or supplier upload any malicious file then how to prevent this to be happen

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):