Oracle profiles don't have a PASSWORD_COMPLEXITY parameter. To enforce password rules like preventing all-numeric passwords, you must create a password verification function (PL/SQL) that uses REGEX to validate password format. This function is then assigned to the user's profile.