IBM Support

Guardium incorrect Vulnerability Assessment result- 'The Oracle instance is not patched to your standard level for this version'

Question & Answer


Question

Why is my Guardium VA giving me the recommendation 'The Oracle instance is not patched to your standard level for this version' when I am already on the most recent Oracle patch?

Answer

It is not possible for Guardium to list all Oracle patch levels for each Database version, so only the version and the patch at the time of the DPS release is added. Make sure you have uploaded the latest DPS, and then add your Database version using the GUI:

1) Navigate to Protect -> Security Policies -> Group Builder
2) Click Next
3) Select Oracle Database Version+Patches and then Modify


4) Create a new Member where Attribute 1 = Database Version and Attribute 2 = Patch Level.

E.g. to create a member for PSU 11.2.0.4.161018

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF010","label":"HP-UX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"},{"code":"PF035","label":"z\/OS"}],"Version":"10.0;10.0.1;10.1;10.1.2","Edition":"All Editions","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21996149

Page Feedback