Oracle:

Vulnerability Discovery

Test Oracle DBs for weak creds on SYS, SYSTEM, SCOTT accounts

1 guide • Created Mar 30, 2026 • Updated Mar 30, 2026

1 guide

Oracle Weak Credential Testing

Mar 30, 2026 • 1 min read

Oracle vulnerability discovery checks for default credentials, exposed listeners, and dangerous privilege grants. Default accounts with known passwords (SYS, SYSTEM, DBSNMP, SCOTT) are the most common finding on Oracle databases.

An unprotected TNS listener accepts connections from any host and may allow remote registration of rogue services. Check for excessive grants like DBA role on application accounts, CREATE LIBRARY or CREATE ANY PROCEDURE privileges, and unpatched Oracle versions with known critical patch update (CPU) vulnerabilities.