Getting 'Invalid request / Error while processing request' When Clicking on the Add Button in Data Model Maintenance (Doc ID 2773375.1)

Last updated on MARCH 10, 2023

Applies to:

Symptoms

In OFSAAI 8.0.6.5 or higher, when attempting to create a new data model rule, you get the following error clicking on the "Add" button (+) in the screen that pops up:

Invalid request / Error while processing request

Please contact your System Administrator for more information.

Additionally, the following error exists in the nohup.out from $FIC_APP_HOME/common/FICServer/bin:

com.ofs.reveleus.modelUpload.util.SQLInjectionException: VULNERABILITY ISSUE FOUND
       at com.ofs.reveleus.modelUpload.handlers.ModelUploadHandler.userRoleValidation(Unknown Source)
       at com.ofs.reveleus.modelUpload.handlers.ModelUploadHandler.AddModelUpload(Unknown Source)
       at com.ofs.reveleus.modelUpload.handlers.ModelUploadHandler.handleAction(Unknown Source)
       at com.ofs.reveleus.modelUpload.servlet.ModelUploadServlet.service(Unknown Source)
       at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)

And the following error exists in the FUSIONSUBSYSTEMSService.log from the web server's OFSAA log directory:

[02-05-21 00:31:24,662 GMT AM] [ERROR] [WEB] [AMHM] [NA] [MODELUPLOADHANDLER] You are not Authorized to access this Page. Please Contact System Administrator.
[02-05-21 00:31:24,662 GMT AM] [DEBUG] [WEB] [AMHM] [NA] [MODELUPLOADSERVLET] Error occured because user is not mapped appropriate this role ::::

This prevents you from running a model upload.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.