Skip to Main Content

SQL & PL/SQL

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

Parameter tampering

raghunadhanJun 3 2025

What is parameter tampering.while package is scanned using checkmarx tool for security reaones.it showing Parameter tampering vulenrability in below cursor at b_table_name in an pkg.

CURSOR c_check_col_exist(b_table_name TABLE_DETAILS.Table_Name%TYPE) IS
SELECT DISTINCT(UPPER(column_name)) AS column_name
FROM all_tab_cols
WHERE UPPER(table_name)= b_table_name;

Comments
Post Details
Added on Jun 3 2025
8 comments
219 views