Mitigating Host Header Attacks on Oracle HTTP Server (Doc ID 2356329.1)

Last updated on SEPTEMBER 09, 2024

Applies to:

Purpose

Mitigating Host Header Attacks on Oracle HTTP Server 11g/12c

This document provides information about the limitations of host headers and how to set things up properly to prevent potential problems with an application.  You should always first install Critical Patch Updates for products in use. Not only for Oracle HTTP Server but Weblogic Server and any other Fusion Middleware products you have installed, e.g. Forms, OBIEE, OAM, etc where applications are deployed for these products.  See the latest Patch Availability Document posted in the latest Security Advisory at https://www.oracle.com/technetwork/topics/security/alerts-086861.html

Details

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.