Mitigate the SSLv3 Vulnerability ("POODLE Attack") in Oracle E-Business Suite

For Release 12.2.X, you do not add the configuration to a customized AutoConfig template. Instead, 12.2.X customers must modify the ssl.conf file using the Oracle Fusion Middleware console using the steps below:

Log in to the Oracle Fusion Middleware Control Console (http://.:/em). For example, http://ebs122.example.com:7001/em.
Select the web tier target under the EBS domain.
Select Administration > Advanced Configuration.
Select the ssl.conf file for edit.
Update the SSLProtocol entry to match the following:
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:!RC4:!3DES:+HIGH:+MEDIUM
Click Apply.

1. Edit the admin.conf file (for Oracle E-Business Suite Release 12.2 only).
   Change:
   
   SSLCipherSuite SSL_RSA_WITH_RC4_128_SHA
SSLProtocol nzos_Version_1_0 nzos_Version_3_0
    to
   
   SSLCipherSuite :
SSLProtocol nzos_Version_1_0
   
   For example:
   
   SSLCipherSuite SSL_RSA_WITH_AES_128_CBC_SHA
SSLProtocol nzos_Version_1_0
    

AS per oracle document  Doc ID 1937646.1