Oracle database server is using port numbers 1521 and 2483. Those ports are open on your virtual machine and allows all incoming traffic from the Internet. In order to keep security best practices, you should restrict access to be only from allowed IP addresses.
Recommended Mitigation
Configure networking rule to allow incoming Oracle database traffic from allowed IP addresses only.