My Oracle Support Banner

How to Ensure that ASAP/OCA Are Not Vulnerable To Clickjacking (Doc ID 2272451.1)

Last updated on JUNE 10, 2022

Applies to:

Oracle Communications ASAP - Version 7.3.0.0.0 and later
Information in this document applies to any platform.

Goal

With ASAP set up in a default way and Oracle Dynamic Scan found that the ASAP/OCA was vulnerable to clickjacking .

During an Oracle Scan operation, a custom HTML was created and the iframe is sourcing the webpage of ASAP OCA. What is the  solution to avoid this. 
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.