What changed in Oracle HTTP Server 12.1.3 STIG V2R3V2R3 changes

Oracle HTTP Server 12.1.3 STIG V2R3 (2025-01-30) replaced V2R2 (2023-01-26): 1 check updated. It has 280 checks, against 280 in V2R2.

V2R3 checklistV2R2 checklist Compare V2R2 and V2R3 in STIG Compare

  • 0 added
  • 0 removed
  • 1 updated

Updated fields: CCIs 1Check text 1Fix text 1Title 1Discussion 1

Updated in V2R3 (1)

V-221449CAT IThe version of the OHS installation must be vendor supported.Title, Check text, Fix text, Discussion, CCIs

Title

The version of the OHS installation must be vendor- supported.

Check text

1. Obtain the version of the OHS 12c12 software (e.g., grep Oracle-HTTP-Server-12c $DOMAIN_HOME/servers/&ltcomponentName>/logs/ohs1.log). Confirm it is 12.1.3. 2.no Referlonger tosupported by the support date schedule for "Fusion Middleware 12c (12vendor.1.x)" atIf http://www.oracle.com/us/support/library/lifetime-support-middleware-069163.pdf. Confirm that support remains available and that the organizationsystem is currentrunning withOHS respect to payments. 3. If not12, this is a finding.

Fix text

1.Upgrade Install or upgrade to a versionsupported of OHS that is within the support timeframes for "Fusion Middleware 12c" at http://wwwversion.oracle.com/us/support/library/lifetime-support-middleware-069163.pdf. 2. Confirm that the organization is current with respect to support payments.

Discussion

Many vulnerabilities are associated with older versions of software. As hot fixes and patches are issued, these solutions are included in the next version of the server software. Maintaining OHS at a current version makes the efforts of a malicious user to exploit the web service more difficult.

CCIs

CCI-000326605

V-221449 in V2R3

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R3 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.