Oracle Security Alerts via e-mail

Hi -
I'm trying to figure out how to get Oracle to send security alerts to me via e-mail, instead of my having to go to the web site (http://otn.oracle.com/deploy/security/alerts.htm).
Thank you!!

Hi Anand,
Go thru this link for establising a HTTP Connection to the external mail server
http://help.sap.com/saphelp_47x200/helpdata/en/ae/71583ca544eb51e10000000a114084/content.htm
>>where do I do I maintain the e-mail address to which theses alerts to be forwarded
The steps are as follows:
1)Select the Alert Category and Check the Additional configurations and execute it.
2)In the pop-up window,
Under Fixed recipients, give the name of a Fixed Recipient User(the user shd present in su01).
3)And press the Create Alert Button
The e-mail address of the fixed recipients is taken from SU01 (User Management).Plz chk the email id is present there for the recieptents.
Hope it helps.
Regards
Arpit Seth

Similar Messages

Oracle Security Alert #48

Does Oracle Security Alert #48 (bug 2642117) - Buffer Overflow in DIRECTORY parameter of Oracle9i Database Server effect Oracle 8i v 8.1.6.0 database?
I know the Oracle Alert states it effects Oracle 8i v 8.1.7, but I'm not sure if that would mean it effects older releases like v 8.1.6.0.
Thanks

Some clips:
"Products Affected
Oracle9i Database Release 2v, Version 9.2.x
Oracle9i Database Release 1v, Version 9.0.x
Oracle8iDatabase,Version 8.1.x
Oracle8 Database, Version 8.0.x"
"Currently there are no plans to release a patch for 8.0.5.x, 8.1.5.x, 8.1.6.x."

Alerts via e-mail

Hi,
I have configured the BPM to raise an alert in case of exceptions. I am able to see the alerts being delivered to my alert inbox. Now I want to send these alerts to uesrs inbox via e-mail. Please let me know what are the steps involved to send alerts via e-mail. Also I would like to know as to where exactly in XI we specify the e-mail address to which these alerts needs to be sent.
Regards
Anand

Hi Anand,
Go thru this link for establising a HTTP Connection to the external mail server
http://help.sap.com/saphelp_47x200/helpdata/en/ae/71583ca544eb51e10000000a114084/content.htm
>>where do I do I maintain the e-mail address to which theses alerts to be forwarded
The steps are as follows:
1)Select the Alert Category and Check the Additional configurations and execute it.
2)In the pop-up window,
Under Fixed recipients, give the name of a Fixed Recipient User(the user shd present in su01).
3)And press the Create Alert Button
The e-mail address of the fixed recipients is taken from SU01 (User Management).Plz chk the email id is present there for the recieptents.
Hope it helps.
Regards
Arpit Seth

TNS Listener Poison attack : Oracle Security Alert for CVE-2012-1675

Hi,
I'm looking to implement the following oracle document about COST but not sure what we need to do for Standby Environment ,
Can you guys please advise.
Oracle Using Class of Secure Transport (COST) to Restrict Instance Registration [ID 1453883.1]
Oracle Security Alert for CVE-2012-1675
Thanks

user097815 wrote:
with regrads to the below thread which mostly talks about Oracle Security Alert for CVE-2012-1675 "TNS Listener Poison Attack"....i just wanted to find out if this effect DB that are externally or internally....meaning 95% of our DB are in network(internally) behind our firewall....and rest of the 5% are outside our firewall facing the world wide web....so does this apply to both of just one ?The attack is on the Listener itself - so if you want to prevent this attack, you need to secure that Listener, irrespective of its location.
IMO, mandatory if you expose your Listener to an unsecured or public network (e.g. internet).
As for Listeners running on your internal network - if this attack is used, securing your Listeners mean very little IMO. Because your internal network already needs to be compromised in order for the attack to occur. Which means you have far more serious problems then someone attacking your Listeners.

Oracle Security Alert for CVE-2012-1675

Hi,
I want to know more about recent release "Oracle Security Alert" : http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675-1608180.html
Document available in https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&id=1453883.1
Fix is about Class of Secure Transport (COST). I need to know about elaborate steps to find out whether this change is need to apply to my databases or not.
About my DBs : 10.2.4 , AIX, Nondefault Listener, Shared env , non RAC, local_listener is null & running in pfile.
Thx,
Gowin.

Hello;
Apply it. Very clean. Simple. No outage on Non-RAC. Biggest Impact is listener stop and start. Took about 3 minutes per server.
Tested today and had zero issues. ( Assumed you understood a CONNECT was part of the test ). Zero issues.
Had a thread on this here a few days ago :
Oracle TNS Poison vulnerability
See Oracle Support Note 1453883.1 for additional information.
Best Regards
mseberg
With all due respect this isn't very hard. Make a decision.
Edited by: mseberg on May 2, 2012 7:13 AM

HT5312 Why can i not reset my security questions via e-mail?

Why can't i reset my security questions via e-mail? There is a page on how to do it but you can't actually fill the form out.

if you are referring to the HT5312 page that you posted from then that only contains instructions for what to do, it's not a form.
To reset your questions yourself you need to already have a a rescue email address (which is not the same thing as an alternate email address) set up on your account - you can see if you do by following the steps on that HT5312 page i.e. go to https://appleid.apple.com/ and click 'Manage your Apple ID' on the right-hand side of that page and log into your account. Then click on 'Password and Security' on the left-hand side of that page and on the right-hand side (if you have a rescue email address) you will see an option to send security question reset info to your rescue email address.
If you don't have a rescue email address (you won't be able to add one until you can answer your questions) then you won't get the reset link on that page - you will need to contact iTunes Support / Apple in your country to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset (and if you don't already have a rescue email address) you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312

How can I receive Apple alert via iCloud mail system?

Currently my login ID is the same as my Gmail address.
So, my Apple alert (that lets me know about my account info change or new login) comes to my Gmail inbox.
However, I want to receive these stuff via iCloud mail so that I can collect my Apple alert in my iCloud mailbox.
How can I do this?
I'm now using my iCloud mail address with my account of which name is my Gmail address.
Or, if possible, I want to use only my iCloud mail address as my main ID and totally get rid of my Gmail address from my Apple account.
Plz give me a tip.
Have a nice day.

If you don't know your ID, you can try to find it as explained here: http://support.apple.com/kb/HT5625. If you don’t know your password you can reset the password as explained here: http://support.apple.com/kb/PH2617.

Java error - Oracle Security Alert for CVE-2010-4476

I have come across this security alert described at http://www.oracle.com/technetwork/topics/security/alert-cve-2010-4476-305811.htm l
In summary - Java Runtime Environment hangs when converting "2.2250738585072012e-308" to a binary floating-point number.
This vulnerability affects:
Java SE
JDK and JRE 6 Update 23 and earlier for Windows, Solaris, and Linux
JDK 5.0 Update 27 and earlier for Solaris 9
SDK 1.4.2_29 and earlier for Solaris 8
Java for Business
JDK and JRE 6 Update 23 and earlier for Windows, Solaris and Linux
JDK and JRE 5.0 Update 27 and earlier for Windows, Solaris and Linux
SDK and JRE 1.4.2_29 and earlier for Windows, Solaris and Linux
Java for MacOS X 10.6 update 3 updates Java to SE 6 to version 1.6.0_22.
Is anyone aware of new Java update for Mac that will fix this problem? If one doesn't exist, does anyone know when a new update will be available?
Thanks.

Hi Hussein,
have you applied this? Please can you update?
Our environment: 11.5.10.2 (9.2.0.7)running on HP-UX PARISC. We are using Jinitiator. We are not yet migrated to J2SE Plugin.
So, since the sercurity patch is for JRE, is that still required for our environment?
Please advise?
Edited by: oraDBA2 on Feb 13, 2011 9:12 PM

Security Alert # 68 Question

I have 8.1.7.4 on Windows 2000 server.
Does patch 8.1.7.4.16 correct the Oracle Security Alert #68? The readme file does not state any information about this alert.

Patch 8.1.7.16 is patch number 3820881 and the original patch for alert #68. 8.1.7.17 (3709700) is cumulative and therefore supersedes 8.1.7.16 , which means alert #68 is addressed.
Patchsets are major patches like 8.1.7.4 and should be always applied, patches like 8.1.7.4.17 have to be applied only if your applications are affected by the bugs described in the README file.

This is regarding CBMA in SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the mails to Business workplace inbox in ECC.

This is regarding CBMA in single stack SAP PI 7.3.1. I have set up the alert mail using default java mail client.I do receive the alerts via mail. But my requirement is to direct all the alert mails to Business workplace inbox in ECC.
So I need to set up PI to redirect mails to ECC Business workplace user inbox (sbwp). From here rules are set up & routed per distribution list.
Please guide me how I can achieve this requirement.

Hi,
yes, it is a little bit different. This is the issue.....
But I am not sure if your links will help:
1) /people/william.li/blog/2008/02/13/sap-pi-71-mapping-enhancements-series-using-graphical-variable
is about a different solution. I do not need to count the number of lines of the source message.
And the second variable is about concat line by line from unbound node to unbound node.
My issue is:
Souce:
Message line (0...unbound) ! ! ! ! ! ! ! !
.    ResultLine   (1..1)
Mapping:
=>   ResultLine1
       ResultLine2
       ResultLine........          => into UDF to an element (1..1) in one mapping operation.
So that all "ResultLine"s are included.
The result is explained in the given link for Mail attachment with UDF.
So I am not sure how to use this thread for my issue.
In the comments of that blog Christoph Gerber writes that the new variable feature can only handle single values.
So it is not suitable for my purposes as I have a list of values here that needs to be moved into the target message field.
2) http://wiki.sdn.sap.com/wiki/display/Java/UsingEditJavaSectioninMessageMapping
shows where to find the button "Java section" which is not available here in 7.1
3) /people/sap.user72/blog/2005/10/01/xi-new-features-in-sp14
too is about the nice little button for Java Section that is no longer existing on PI 7.1 screen for mappings.
So my issue is: How to replace the Java section function with global variables in PI 7.1?
Best regards
Dirk

Alert #68: Oracle Security Update

Hi All ,
I am new to the world of Oracle EBS and I was recently assigned the DBA task in my company for the ebs 11.5.10.2 that was installed be a former DBA .
Our security department are following up on a security update by oracle in the link .
http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf
I see that my database is version 9.2.0.6 so I do not think I need to do anything there . Is that true ?
For the application server , Can someone help me to find what version I have ? Also , How do I apply the patch if needed .
I also do not know if the former DBA already installed the patch or not how do I find out ?
Thanks

Saeed,
You do not need to install any iAS rollup patch since you are on the latest one.
For Oracle HTTP Server security patches, you need to have Patch 3835781 installed. This is already explained in the following notes:
Note: 281189.1 - SECURITY ALERT #68 - Oracle Security Update (Patch Availability Matrix)
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=281189.1
Note: 283402.1 - How to Patch Application Server for Security Alert 68 - Specific Examples
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=283402.1
Note: 282426.1 - Security Alert #68 - FAQ for Oracle Application Server Products
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=282426.1

Config Oracle Alert to send mail

Hi everyone !
I want to setup Event Alert to send mail use Unix sendmail in our project.
My Apps is 9.5.10.2 CU2, i have never applied to Rollup4.( Rollup 4 send mail with WF)
If i want system to sent a message from [email protected] to [email protected], i configed sendmail package successfull. What do i do next step ?
Further, In Page 9.3 of Oracle Alert User's Guide, at Setp 2, How to create Mail System Administrator?
Regard !
Edited by: whoami! on Nov 20, 2009 6:19 PM

I config Alert on other table and see issue following: in only Alert but when 8 row updated then create 8 requests, and auto perform 8 actions to sends 8 same mail.But i want only system to send 1 mail .
Can you help me !
Detail:
When I create 1 PO,i want system to send 1 mail to superior to approval, i use SQL:
=====================
select
created_by,
last_updated_by,
rowid,
authorization_status,
LAST_UPDATE_LOGIN,
approved_flag,
wf_item_type,
wf_item_key,
xml_flag,
submit_date
into
&cby,
&last_updated_by,
&rowid,
&auth_status,
&LAST_UPDATE_LOGIN,
&approved_flag,
&wf_item_type,
&wf_item_key,
&xml_flag,
&submit_date
from po_headers_all
where
(last_updated_by=1147
and created_by=1147
and upper(authorization_status)='IN PROCESS'
and LAST_UPDATE_LOGIN = -1
and approved_flag is not null
and wf_item_type is not null
and wf_item_key is not null
and xml_flag is not null
and submit_date is not null
and rowid=:rowid)
===================
Thanks for advance !

How to disable Security Alerts message in IE10 via GPO

I'm trying to disable annoying Security Alert message "You are about to view pages over a secure connection" in IE10 via GPO.
I tried different GPO settings but neither of them did the trick.
Any advice\suggestion would be appreciated.
Thx. Boris

Hi,
You can try going to Tools > Internet Options > Advanced and uncheck the box next to "Warn if changing between secure and not secure mode".
And via the GP setting:
Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\ Turn off the Security Settings Check feature.
Regards,
Ada Liu
TechNet Community Support

Oracle Alert with Workflow Mailer

Hi,
In order to check Alerts with Workflow Mailer, in TEST environment (Cloned from PROD Instance) , we need to setup Workflow Mailer.
Question : How to setup Workflow Mailer in TEST environment , in order that no mails will be sent to customers ...
Thank's

In order to check Alerts with Workflow Mailer, in TEST environment (Cloned from PROD Instance) , we need to setup Workflow Mailer.This is correct if you are on 11i (ATG RUP4 or above) or R12
Question : How to setup Workflow Mailer in TEST environment , in order that no mails will be sent to customers ...disable workflow for all users
Re: disable workflow for all users
Set WorkFlow Override Address After Clone Using SQL
Set WorkFlow Override Address After Clone Using SQL
Thanks,
Hussein

Oracle Periodic Alert -Not sending Email Notifications

Hi,
I configured a periodic alert in my test and development instances. I had a SQL Query in Select Statement. When I verified the SQL Statement Oracle Alert successfully parses the SQL Statement . When I run it rows are getting selected. I defned Actions, Action Set, Action Set Details, Action Details. In the Actions Tab---> Action Details I listed out the persons to whom Mail needs to be send.
I checked the below ones...
Notification Mailer is Up
Periodic Alert Scheduler is Activated
But the notified persons are not recieving mails.
I has one more question
Is that if the Select Statement after parsing doesnt return any rows... Alert will not be triggered. if it returns 0 rows.
What else needs to be checked.. Let me know if you can sort it out...

Please post the details of the application release, database version and OS.
What is your ATG patchset level? If you are on ATG RUP4 or above, then please confirm that Oracle Workflow is configured and working properly with no issues -- Check the Workflow log file for any errors.
Is the issue with all alerts or specific ones only? Can you reproduce the issue with all end-users for the same alert or with specific users only?
Please see if these docs help.
How To Send An Email In A Simple Periodic Or Event Alert? [ID 1162153.1]
Using Oracle Alert with Workflow Mailer [ID 395128.1]
Oracle Alert Does Not Sent Any Emails After Applying Patch 4676589 11i.ATG_PF.H Rollup 4 [ID 402361.1]
Should Emails Sent Via Oracle Alerts Have A Workflow Notification In The Worklist? [ID 435281.1]
Changes Introduced in Alerts Post RUP4 and its Impact [ID 422782.1]
Thanks,
Hussein

Oracle Security Alerts via e-mail

Similar Messages

Maybe you are looking for