Oracle Privileged Users and Default Password Audit
Finds users with DBA privileges, accounts with default passwords and non-expiring passwords. A baseline check for hardening and audits.
SELECT grantee, granted_role, admin_option
FROM dba_role_privs
WHERE granted_role IN ('DBA','SYSDBA','EXP_FULL_DATABASE','IMP_FULL_DATABASE')
ORDER BY grantee;
SELECT d.username, u.account_status, u.profile
FROM dba_users_with_defpwd d
JOIN dba_users u ON u.username = d.username
ORDER BY d.username;
SELECT username, account_status, expiry_date, profile FROM dba_users
WHERE account_status = 'OPEN' AND expiry_date IS NULL;Verify in a staging environment prior to running in production. This is a read-only diagnostic query; it does not acquire exclusive locks.
- This script is designed for read-only diagnostics; it does not alter schema or modify data directly.
- Prior to executing on production systems under high load, verify the target database version (Min. Version: 11g).
- Exercise caution with mutating actions (e.g., terminating sessions or dropping indexes) referenced in the notes section.
Other ORACLE Diagnostic Scripts
View All (100)Oracle Active Sessions and Wait Events
Lists active user sessions with the running SQL_ID and wait event. Shows the live picture during performance issues.
Find Blocking Sessions in Oracle
Shows sessions that make others wait, with wait times. Identifies the root session to terminate in lock incidents.
Oracle Tablespace Usage Including Autoextend
Calculates tablespace usage against the real maximum, honoring autoextend limits. Catches space errors like ORA-01653 before they happen.
Top 20 Most Expensive Oracle SQL with v$sqlstats
Shows costliest SQL by elapsed time with executions, CPU and I/O. Tells you which SQL_ID to investigate for tuning.