Database Install/Upgrade/Opatch (MOSC)
MOSC Banner

Clarification on OJVM Vulnerability in Security Scan on Oracle 19.26

Hi Team,

We have Oracle Database version 19.26 installed on our system. However, during a recent security scan, we encountered the following vulnerability:

166370 - Oracle Database Server (Oct 2022 CPU)
Suggested Solution: Apply the appropriate patch as per the October 2022 Oracle Critical Patch Update advisory.
Component: OJVM
Installed version: 19.0.0.0.0
Fixed version: 19.17.0.0.221018
Missing Patch: 34411846

To investigate this further, I ran the following query to check whether OJVM is installed:

SELECT comp_id, status, version FROM dba_registry WHERE comp_id = 'JAVAVM';
The result returned no rows, indicating that the OJVM component is not installed on the database.

Additionally, I ran the opatch lspatches command to verify the applied patches:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center