Security related values in the 12c SYS.USER$ table are
CTIME: Date & Time when user was created
PTIME: Date & Time when user password was last changed
LTIME: Date & Time when the user account was locked
LCOUNT: Number of failed login attempts
Added in Oracle Database 12c:
SPARE6: Last login time of the user.