My Oracle Support Banner

'Invalid request / Error while processing request' After Changing Password in OFSAA User Management (Doc ID 2408299.1)

Last updated on JUNE 11, 2018

Applies to:

Oracle Financial Services Analytical Applications Infrastructure - Version 8.0.6 and later
Information in this document applies to any platform.
Oracle Financial Services Analytical Applications (OFSAA)


In Oracle Financial Services Analytical Applications (OFSAA) 8.0.6, when trying to update a user's password in Identity Management > User Management, after entering the new password value and clicking on 'Save', the following error message appears:

Invalid request / Error while processing request

Additionally, the following error exists in the Tomcat web server catalinatest.2018-06-04.log:

04-Jun-2018 10:28:29.599 WARNING [http-nio-8080-exec-6] org.owasp.esapi.reference.JavaLogFactory$JavaLogger.log [SECURITY FAILURE Anonymous:null@unknown -> /DefaultName/IntrusionDetector] Invalid input: context=ValidationFramework, type(OFS_AAI_SMS_date_exp)=(0[0-9]|1[0-2])\/([0-2][0-9]|3[0-1])\/[0-9][0-9][0-9][0-9]( ([0-2][0-9]|2[0-4]):[0-5][0-9]:[0-5][0-9] [AP]?M)?, input=03-FEB-17
org.owasp.esapi.errors.ValidationException: ValidationFramework: Invalid input. Please conform to regex (0[0-9]|1[0-2])\/([0-2][0-9]|3[0-1])\/[0-9][0-9][0-9][0-9]( ([0-2][0-9]|2[0-4]):[0-5][0-9]:[0-5][0-9] [AP]?M)? with a maximum length of 9
       at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(
       at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(
       at org.owasp.esapi.reference.validation.StringValidationRule.getValid(
       at org.owasp.esapi.reference.DefaultValidator.getValidInput(
       at org.owasp.esapi.reference.DefaultValidator.getValidInput(
       at com.iflex.fic.ficml.SMSServlet.doPost(
       at javax.servlet.http.HttpServlet.service(
       at javax.servlet.http.HttpServlet.service(

As a result of these errors, the user password is not changed.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.