Use RACF protection (or equivalent) as discussed in this Security Guide.
Restrict network access. ELS and the tape libraries it manages should be behind the corporate firewall.
Secure ELS network traffic with the IBM AT-TLS facility if required.
Apply all ELS PTFs and HOLDDATA.
Contact Oracle software support at http://www.myoraclesupport.com/ if you encounter vulnerability in Oracle ELS software.