How to Ensure that ASAP/OCA Are Not Vulnerable To Clickjacking (Doc ID 2272451.1)

Last updated on JUNE 12, 2017

Applies to:

Oracle Communications ASAP - Version 7.3.0.0.0 and later
Information in this document applies to any platform.

Goal

With ASAP set up in a default way and Oracle Dynamic Scan found that the ASAP/OCA was vulnerable to clickjacking .

During an Oracle Scan operation, a custom HTML was created and the iframe is sourcing the webpage of ASAP OCA. What is the  solution to avoid this. 
 

Solution

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms