Scuba by Imperva
Scuba by Imperva is a free, lightweight Java tool that scans Oracle, DB2, MS-SQL, and Sybase databases for hundreds of software vulnerabilities. It also detects configuration flaws like insecure passwords, unsafe processes, unrestricted permission levels, and more. Furthermore, it generates HTML and Java reports that show overall security risk level and detailed information about each vulnerability so you can pinpoint configuration risks within minutes.
Scuba by Imperva detects hundreds of database vulnerabilities and configuration issues. And better yet it helps you meet industry-leading best practices standards for database configuration and management.