Remove unused applications from WebLogic

Currently, the WebLogic Server installation includes the entire JDK and some additional WebLogic Server development utilities (for example, wlsvc). These development programs are not needed at runtime and can be safely removed.

The following are recommendations for making a WebLogic Server installation more secure:
  • Do not install the WebLogic Server sample applications.
  • Delete development tools, such as the Configuration Wizard and the jCOM tools.
  • Delete the Derby database, which is bundled with WebLogic Server for use by the sample applications and code examples as a demonstration database.
For more details, refer to the Determining Your Security Needs section in Oracle® Fusion Middleware Securing a Production Environment for Oracle WebLogic Server 12c Release 3 (12.1.3).