Oracle WebLogic Server 12c Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Oracle WebLogic must utilize automated mechanisms to prevent program execution on the information system.
<VulnDiscussion>The application server must provide a capability to halt or otherwise disable the automatic execution of deployed application...Rule Low Severity -
SRG-APP-000148-AS-000101
<GroupDescription></GroupDescription>Group -
Oracle WebLogic must produce audit records containing sufficient information to establish the identity of any user/subject or process associated with the event.
<VulnDiscussion>Information system auditing capability is critical for accurate forensic analysis. Audit record content that may be necessary...Rule Medium Severity -
SRG-APP-000515-AS-000203
<GroupDescription></GroupDescription>Group -
Oracle WebLogic must provide the ability to write specified audit record content to an audit log server.
<VulnDiscussion> Information system auditing capability is critical for accurate forensic analysis. Audit record content that may be necessar...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules