Clarification on OJVM Vulnerability in Security Scan on Oracle 19.26
Hi Team,
We have Oracle Database version 19.26 installed on our system. However, during a recent security scan, we encountered the following vulnerability:
166370 - Oracle Database Server (Oct 2022 CPU)
Suggested Solution: Apply the appropriate patch as per the October 2022 Oracle Critical Patch Update advisory.
Component: OJVM
Installed version: 19.0.0.0.0
Fixed version: 19.17.0.0.221018
Missing Patch: 34411846
To investigate this further, I ran the following query to check whether OJVM is installed:
SELECT comp_id, status, version FROM dba_registry WHERE comp_id = 'JAVAVM';
The result returned no rows, indicating that the OJVM component is not installed on the database.
Additionally, I ran the opatch lspatches command to verify the applied patches: