STIGQter STIGQter: STIG Summary: Oracle Database 19c Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 01 Apr 2026:

Fixed user and PUBLIC Database links must be authorized for use.

DISA Rule

SV-270522r1115956_rule

Vulnerability Number

V-270522

Group Title

SRG-APP-000516-DB-000363

Rule Version

O19C-00-008700

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Document all authorized connections from the database to remote databases.

Remove all unauthorized remote database connection definitions from the database.

From SQL*Plus:

drop database link [link name];
OR
drop public database link [link name];

Review remote database connection definitions periodically and confirm their use is still required and authorized.

Check Contents

If using a non-CDB database:
Use the following query to get a list of database links.

From SQL*Plus:

select owner||': '||db_link from dba_db_links;

If using a CDB database:
Use the following query to get a list of database links.

select con_id_to_con_name(con_id) con_id, owner, db_link, username, host from cdb_db_links order by 1,2,3;

Check Results:

If no rows are returned from the first SQL statement, this check is not a finding.

If there are rows returned, verify the database links are required. If they are required and exist, this is not a finding.

Vulnerability Number

V-270522

Documentable

False

Rule Version

O19C-00-008700

Severity Override Guidance

If using a non-CDB database:
Use the following query to get a list of database links.

From SQL*Plus:

select owner||': '||db_link from dba_db_links;

If using a CDB database:
Use the following query to get a list of database links.

select con_id_to_con_name(con_id) con_id, owner, db_link, username, host from cdb_db_links order by 1,2,3;

Check Results:

If no rows are returned from the first SQL statement, this check is not a finding.

If there are rows returned, verify the database links are required. If they are required and exist, this is not a finding.

Check Content Reference

M

Target Key

5672