How to Ensure that ASAP/OCA Are Not Vulnerable To Clickjacking

(Doc ID 2272451.1)

Last updated on NOVEMBER 30, 2017

Applies to:

Oracle Communications ASAP - Version and later
Information in this document applies to any platform.


With ASAP set up in a default way and Oracle Dynamic Scan found that the ASAP/OCA was vulnerable to clickjacking .

During an Oracle Scan operation, a custom HTML was created and the iframe is sourcing the webpage of ASAP OCA. What is the  solution to avoid this. 


Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms