How to Ensure that ASAP/OCA Are Not Vulnerable To Clickjacking
(Doc ID 2272451.1)
Last updated on MARCH 06, 2018
Applies to:Oracle Communications ASAP - Version 220.127.116.11.0 and later
Information in this document applies to any platform.
With ASAP set up in a default way and Oracle Dynamic Scan found that the ASAP/OCA was vulnerable to clickjacking .
During an Oracle Scan operation, a custom HTML was created and the iframe is sourcing the webpage of ASAP OCA. What is the solution to avoid this.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!