My Oracle Support Banner

TLS vulnerability reported on EM express port. EM Express is not blocking access through lower protocols TLS1.0 and TLS1.1 (Doc ID 3060571.1)

Last updated on NOVEMBER 25, 2024

Applies to:

Oracle Database - Enterprise Edition - Version 19.3.0.0.0 and later
Advanced Networking Option - Version 19.0.0.0.0 and later
Oracle Cloud Infrastructure - Exadata Cloud Service - Version N/A and later
Gen 1 Exadata Cloud at Customer (Oracle Exadata Database Cloud Machine) - Version N/A and later
Gen 2 Exadata Cloud at Customer - Version N/A and later
Microsoft Windows x64 (64-bit)

Symptoms

Customer followed the action plan given on the document 2899898.1 but EM Express https port 5500 still allow communication over TLS1.0,TLS1.1
Verified using below commands

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.