Description

Oracle Integration (OIC) is a complete, secure, but lightweight integration solution that enables you to connect your applications in the cloud. It simplifies connectivity between your applications and connects both your applications that live in the cloud and your applications that still live on premises. OIC instances are created within an Oracle managed secure private network with each having a public endpoint. The capability to configure ingress filtering of network traffic to protect your OIC instances from unauthorized network access is included. It was detected that OIC instance {OciIntegrationInstance.Name} has an unrestricted access control rule. It is advised that network access to your OIC instances be restricted to your approved corporate IP Addresses or Virtual Cloud Networks (VCN)s. Restricting connectivity to OIC Instances reduces an OIC instance's exposure to risk.

• 

  Recommended Mitigation

  It is recommended to edit the access control rule to be more restrictive and only allow access from authorized IPs/VCNs.