My Oracle Support Banner

Accessing Fusion Middleware WebLogic Deployment displays "Error--403 Forbidden" instead "Error 404--Not Found" (Doc ID 2752737.1)

Last updated on FEBRUARY 17, 2021

Applies to:

Oracle WebLogic Server - Version 10.3.6 and later
Information in this document applies to any platform.

Symptoms

When using Oracle Fusion Middleware products with Oracle HTTP Server (OHS) , EM etc. Default Welcome Page application "FMW Welcome Page Application ", are installed by default under deployments in webLogic console.

Accessing Fusion Middleware WebLogic deployment with http://<hostname>:<Adminport>/es ,/fn, /de, /ko or with any other languages context path display 403 Forbidden instead Error 404--Not Found.

Encountering 403 response , even though they are not authorized and attacker knows that file/directory exist.

Expecting 404 response instead 403.

Steps to replicate

==========

1. Start Admin server

2. Access Admin URL with /en context path or any other language context path

http://<hostname>:<Admin port>/en

3. Hit enter in the browser with above Admin URL.

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.