Accessing Fusion Middleware WebLogic Deployment Displays "Error--403 Forbidden" instead "Error 404--Not Found" (Doc ID 2752737.1)

Last updated on FEBRUARY 22, 2024

Applies to:

Symptoms

When using Oracle Fusion Middleware products with Oracle HTTP Server (OHS), EM etc. Default Welcome Page application "FMW Welcome Page Application ", are installed by default under deployments in WebLogic console.

Accessing Fusion Middleware WebLogic deployment with http://<hostname>:<Adminport>/es ,/fn, /de, /ko or with any other languages context path display 403 Forbidden instead Error 404--Not Found.

Encountering 403 response , even though they are not authorized and attacker knows that file/directory exist.

Expecting 404 response instead 403.

Steps to replicate:

1. Start Admin server

2. Access Admin URL with /en context path or any other language context path

http://<hostname>:<Admin port>/en

3. Hit enter in the browser with above Admin URL.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.