Effective Oracle E Business Suite Change Management from DBA to Auditor
For the Oracle E-Business Suite, change management is challenging as the application and technology stack are open and flexible. Changes may be made at many different layers and to a large of number...
View ArticleImplementing Two-Factor Authentication (2FA/MFA) for Oracle E-Business Suite
Two-factor authentication (2FA) or multi-factor authentication (MFA) is an extra layer of security to ensure that users accessing an application are who they say they are. Using 2FA with Oracle...
View ArticleWebLogic Vulnerabilities - Oracle E-Business Suite Impact (CVE-2020-14882 and...
As part of the Oracle October 2020 Critical Patch Update (CPU), two critical vulnerabilities were fixed in the Oracle WebLogic web application server (CVE-2020-14882/CVE-2020-14883) that allow an...
View ArticleUpcoming Webinar: Oracle E-Business Suite Security for Auditors
Oracle E-Business Suite Security for Auditors Thursday, December 17, 2020 - 2:00 pm to 3:00 pm ESTAuditors are trained to understand the financial aspects and the end user functionality of Oracle...
View ArticleOracle E-Business Suite Security for Auditors
Auditors are trained to understand the financial aspects and the end user functionality of Oracle E-Business Suite. However, most auditors have not been trained in the security features and technical...
View ArticleDevSecOps in an Oracle E-Business Suite Environment
Development and customization in an Oracle E-Business Suite (EBS) environment is different than with custom-built applications as the development process is focused on many small development objects be...
View ArticleSecurity Implications of Oracle E-Business Suite 12.1.3 End of Support
Oracle E-Business Suite 12.1.3 moves from Premier Support to Sustaining Support at the end of December 2021. Sustaining Support does not include security patches, new security features, nor compliance...
View ArticleLog4j Vulnerabilities Impact On Oracle E-Business Suite Analysis
Multiple significant security vulnerabilities (CVE-2021-44228, CVE-2021-45046, and CVE-2021-4104) have been disclosed and patched in the popular Java logging library Apache Log4j. This library is...
View ArticleLog4j Vulnerabilities Impact On Oracle E-Business Suite - Updated Information
Multiple significant security vulnerabilities (CVE-2021-44228, CVE-2021-45046, and CVE-2021-4104) have been disclosed and patched in the popular Java logging library Apache Log4j. This library is...
View ArticleSSO and MFA for Oracle E-Business Suite without the Complexity
Single Sign-On (SSO) and Multi-Factor Authentication (MFA) provide extra layers of security to ensure that users accessing the application are who they say they are. Implementing either SSO or MFA or...
View ArticleOracle E-Business Suite 12.1.3 Support Has Ended - How to Stay Secure
Oracle E-Business Suite 12.1.3 moved from Premier Support to Sustaining Support at the end of December 2021. Sustaining Support does not include security patches, new security features, nor compliance...
View ArticleIdentifying Security Vulnerabilities in Oracle E-Business Suite Customizations
Customizing Oracle E-Business Suite (EBS) is different from developing custom-built applications as the development process is focused on many small development objects be it web pages, reports,...
View ArticleIntroducing the Integrigy Cybersecurity Framework for Oracle E-Business Suite
The security of the Oracle E-Business Suite is a blind spot within most organizations. Compounding this security deficiency are a myriad of factors at play such as organizational misalignment and the...
View ArticleCVE-2022-21500 Analysis and Recommendations
Oracle released an out-of-cycle security alert on May 19, 2022 for Oracle E-Business Suite (EBS) to address an information disclosure security vulnerability. The vulnerability is being actively...
View ArticleSSO and MFA for Oracle E-Business Suite Without the Complexity
Single Sign-On (SSO) and Multi-Factor Authentication (MFA) provide extra layers of security to ensure that users accessing the application are who they say they are. Implementing SSO and MFA with...
View Article