Web ADI Create Document Errors: Detected Physhing Attack string in BNE_REDIRECT_PORTAL profile value: (Doc ID 1965891.1)

Last updated on DECEMBER 08, 2016

Applies to:

Oracle Web Applications Desktop Integrator - Version 12.1.3 and later
Information in this document applies to any platform.
Checked for relevancy Dec. 8, 2016

Symptoms

After patching, when attempting to create WEBADI templates, they error with:
'You are trying to access a page that redirects you to a web page outside the current domain.
Hence, this request has been blocked.'

The bne.log (with trace enabled) shows errors such as:


1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 TRACE          Profile: BNE_REDIRECT_PORTAL = https://ebs.reply.it/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 TRACE          BneOracleWebAppsContext.getHomePageURL(), homePageURL from BNE_REDIRECT_PORTAL profile = https://ebs.reply.it/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 TRACE          BneOracleWebAppsContext:getAppsServletAgentPath() Servlet Path: https://ebs.reply.it:443/OA_HTML/
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneOracleWebAppsContext.getHomePageURL() - Detected Physhing Attack string in BNE_REDIRECT_PORTAL profile value: https://ebs.reply.it/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneOracleWebAppsContext.getHomePageURL() - Stack Trace: java.lang.Exception
at oracle.apps.bne.framework.BneOracleWebAppsContext.getHomePageURL(BneOracleWebAppsContext.java:814)
at oracle.apps.bne.webui.framework.BneBasePageBean.getUserHomePage(BneBasePageBean.java:567)
...

1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneTemplateRedirectService:doRequest() - Detected Physhing Attack string in event, name: bne:redirect
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneTemplateRedirectService:doRequest() - value: https://ebs.reply.it/OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneTemplateRedirectService:doRequest() - position: -1
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneTemplateRedirectService:doRequest() - user: SYSADMIN
1/29/15 3:30 PM AJPRequestHandler-HTTPThreadGroup-3 ERROR          BneTemplateRedirectService:doRequest() - Stack Trace: java.lang.Exception:
at oracle.apps.bne.integrator.document.template.BneTemplateRedirectService.handleRequest(BneTemplateRedirectService.java:177)
at oracle.apps.bne.framework.BneHTMLServlet.doRequest(BneHTMLServlet.java:71)
at oracle.apps.bne.framework.BneRawServlet.doGet(BneRawServlet.java:98)

...

 

Changes

 Applied patches

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms