How to Ensure that ASAP/OCA Are Not Vulnerable To Clickjacking
Last updated on NOVEMBER 30, 2017
Applies to:Oracle Communications ASAP - Version 126.96.36.199.0 and later
Information in this document applies to any platform.
With ASAP set up in a default way and Oracle Dynamic Scan found that the ASAP/OCA was vulnerable to clickjacking .
During an Oracle Scan operation, a custom HTML was created and the iframe is sourcing the webpage of ASAP OCA. What is the solution to avoid this.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms