cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Summary

This article addresses the difference between Oracle Database (Unknown Component) and Unspecified Edition

Question

What is the difference between Oracle Database (Unknown Component) and Unspecified Edition?

Answer

In response to issues with recognition of Oracle Database, the following classifications were specified in the ARL:

1. Oracle Database (Unknown Component)
These are the replacements for the "unknown component/edition" records. The evidence here included too wide a range of items. Some of them were more than unknown components. They were clearly indicating an Oracle Database or some other component. When you see Unknown Component now, this means that it's unrecognized evidence that's not linked to a database, which should not be considered as a risk (Nicolas Rousseau: 2022/06/02: the Oracle Database unknown component will be soon classified as component, and no longer as commercial).

2. Oracle Database Unspecified Edition, e.g. "Oracle Database 10g R2", these are new to the ARL, and contain the evidence from the unknown component records that clearly indicate the presence of an Oracle Database, but do not have the edition. When we can see the evidence indicating an Oracle Database we need to be clear that is what we see. All of our focus should be put on these classifications, because it means that evidence has been found suggesting the presence of a database and there's an issue with the inventory.

These changes should provide a much clearer set of results from the ARL than was previously being generated.

Was this article helpful? Yes No
No ratings
Comments
INgrid
By
Level 5

I need some clarifications to the above.  It says "When you see Unknown Component now, this means that it's unrecognized evidence that's not linked to a database, which should be ignored."

It is not clear to me if it what should be ignored here. Additionally, the ARL has not set the evidence to Ignored but linked it to applications that are listed as Commercial. If the evidence 6 applications should be ignored please clarify that. Updates to the ARL would also be appreciated! 

(Running FNMS on-prem v 2020 R2 and ARL 2613)

shuduguru
By Level 7 Flexeran
Level 7 Flexeran

Hello @INgrid , 

We dont ignore Oracle database evidences which doesn't not carry edition. These evidences will be mapped to Unknown component application. 

Even though we don’t see much difference between Unknown component and Unspecified edition, we need to maintain any one naming convention in ARL. We will work towards it in upcoming days. 

Hope this helps, 

Version history
Last update:
‎Jun 02, 2022 05:24 AM
Updated by: