Web Security Risk: Injection Link Possible
(Doc ID 1447320.1)
Last updated on OCTOBER 29, 2019
Applies to:Oracle Utilities Energy Information Platform - Version 1.5.0 and later
Information in this document applies to any platform.
=== ODM Issue Clarification ===
A security audit on the website has uncovered a high security risk: it is possible on some standard pages to inject a link in the request (called "Injection link" risk).
For example on url: https://intcdm.grtgaz.com/lodestar/Classic/DataTools/genoptions/intervaldata.asp using parameter UserLevel
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document