My Oracle Support Banner

Web Security Risk: Injection Link Possible (Doc ID 1447320.1)

Last updated on SEPTEMBER 27, 2022

Applies to:

Oracle Utilities Energy Information Platform - Version 1.5.0 and later
Information in this document applies to any platform.

Symptoms


=== ODM Issue Clarification ===
A security audit on the website has uncovered a high security risk: it is possible on some standard pages to inject a link in the request (called "Injection link" risk).
For example on url: https://intcdm.grtgaz.com/lodestar/Classic/DataTools/genoptions/intervaldata.asp using parameter UserLevel

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.