AUTOMATED VULNERABILITY ASSESSMENT IN WINDOWS ACTIVE DIRECTORY AND ORACLE DATABASE ENVIRONMENTS USING POWERSHELL AND SQL*PLUS

Abstract

Enterprise IT environments are rarely built around a single technology. In most mid-to-large organisations, identity management runs through Microsoft Active Directory while business-critical data sits in relational databases such as Oracle. This combination is operationally essential and a recurring focus of security incidents. Reviewing such environments manually is slow, inconsistent across reviewers, and leaves real gaps in coverage. This paper describes a practical approach to automating vulnerability assessment across both layers using tools already present in the environment: PowerShell for the Windows and Active Directory side, and SQL*Plus for Oracle Database. The focus is on configuration weaknesses, access control gaps, and governance failures that accumulate quietly in production systems. The paper presents a methodology, discussion of typical findings, and an honest account of where the approach runs into its limits.