Object Migration Definition Does Not Save When More Than 400 Definitions Are Selected and [FILTERSERVLET]This pattern does not allow Errors (Doc ID 2213844.1)

Last updated on FEBRUARY 28, 2017

Applies to:

Oracle Financial Services Analytical Applications Infrastructure - Version 8.0.0 and later
Oracle Financial Services Asset Liability Management - Version 8.0.0 and later
Oracle Financial Services Profitability Management - Version 8.0.0 and later
Oracle Financial Services Funds Transfer Pricing - Version 8.0.0 and later
Information in this document applies to any platform.
Oracle Financial Services Analytical Applications (OFSAA)
Oracle Financial Services Analytical Applications Infrastructure (OFSAAI)
Oracle Financial Services Profitability Management (PFT)
Oracle Financial Services Funds Transfer Pricing (FTP)
Oracle Financial Services Asset Liability Management (ALM)

Symptoms

On OFSAA 8.0.2, the Object migration definition is not getting saved when more than 400 definitions are selected. Attempting to migrate PFT related definitions like Filters, Allocation Rules from one environment to another environment. There are currently more than 1000 filters and 800 allocation rules as of now. When selecting all the filters at a time so that it is not required to select individual definitions, the object migration definition definitions is not getting saved. But when it is split the count into 25/50/100 then the definition is savable and migration is successful. This is a time consuming process. When checked the logs, there is a Security vulnerability error. If it is security vulnerability then it should not allow to save when selecting the definitions individually in small numbers. The SMSService.log shows the following errors:

ERROR
[UMMLOG] Aug 9,16 01:51:27 : [FILTERSERVLET]This pattern does not allow '\b((d)|(D)|(%44)|(%64)|(\\x44)|(\\x64))((e)|(E)|(%65)|(%45)|(\\x65)|(\\x45))((l)|(L)|(%4C)|(%6C)|(\\x4C)|(\\x6C))((e)|(E)|(%65)|(%45)|(\\x65)|(\\x45))((t)|(T)|(%54)|(%74)|(\\x54)|(\\x74))((e)|(E)|(%45)|(%65)|(\\x45)|(\\x65))\b' for the input string 'PFTSOURCE

...

[UMMLOG] Aug 9,16 01:51:27 : [FILTERSERVLET]Exception thrown : SQL/Javascript Keyword found in request parameter : xmlData


The issue can be reproduced at will with the following steps:
1. Select all items to be migrated.
2. Attempt to save the definition.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms