"[2000088] Found Security Vulnerability" Error When Adding a New Payment Pattern (Doc ID 2407951.1)

Last updated on MARCH 24, 2023

Applies to:

Symptoms

When adding a new Payment Pattern, the opened screen states "[2000088] Found security vulnerability"

The interface is also crashing with the following error in the fsapps.log from WEBSERVER log path:


Error:
[10-05-18 14:58:58 PM] ~ DEBUG ~ FSAPPS ~ [COMMONAPP] Infodom :FICMAS**R
[10-05-18 14:58:58 PM] ~ ERROR ~ FSAPPS ~ ****** VALIDATION FAILED in isValidNumber function*****
[10-05-18 14:58:58 PM] ~ ERROR ~ FSAPPS ~ Input: is not a valid number
[10-05-18 15:03:56 PM] ~ DEBUG ~ FSAPPS ~ [COMMONAPP] Infodom :FICMAS**R
[10-05-18 15:03:56 PM] ~ ERROR ~ FSAPPS ~ ****** VALIDATION FAILED in isValidNumber function*****
[10-05-18 15:03:56 PM] ~ ERROR ~ FSAPPS ~ Input: is not a valid number

UI Error:

Steps to Replicate:

1. Applied the following patches:
   <Patch 27238526> REFLECTIVE CROSS SITE SCRIPTING AND SQL INJECTION ISSUES IN FTP
   <Patch 27705719> TRACTOR FTP IS NOT WORKING ON ROLL PORTFOLIO STEP > BLANK POPUP IN BEHAVIOR PATTERN
2. Navigate to  FTP Maintenance -> Patterns -> Payment Patterns -> Add a Payment Patterns then error occurred.

Changes

Applied the following patches:
Patch 27238526 REFLECTIVE CROSS SITE SCRIPTING AND SQL INJECTION ISSUES IN FTP
Patch 27705719 TRACTOR FTP IS NOT WORKING ON ROLL PORTFOLIO STEP > BLANK POPUP IN BEHAVIOR PATTERN

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.