Data protection

Oracle Integration Cloud (OIC) is publicly accessible

Platform(s)
  • Oracle Cloud Infrastructure

Compliance Frameworks
  • CPRA
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • Mitre ATT&CK
  • ,
  • mpa
  • ,
  • NIST 800-53
  • ,
  • OCI CIS

Description

Oracle Integration (OIC) is a complete, secure, but lightweight integration solution that enables you to connect your applications in the cloud. It simplifies connectivity between your applications and connects both your applications that live in the cloud and your applications that still live on premises. OIC instances are created within an Oracle managed secure private network with each having a public endpoint. The capability to configure ingress filtering of network traffic to protect your OIC instances from unauthorized network access is included. It was detected that OIC instance {OciIntegrationInstance.Name} has an unrestricted access control rule. It is advised that network access to your OIC instances be restricted to your approved corporate IP Addresses or Virtual Cloud Networks (VCN)s. Restricting connectivity to OIC Instances reduces an OIC instance's exposure to risk.