VBCS CORS Error While Accessing ATP REST Service from Fusion

Summary:

We are facing a CORS-related issue when accessing an ATP REST service from a VBCS application launched within Oracle Fusion.

Content (please ensure you mask any confidential information):

• ATP table is exposed through a REST service.
• Authentication type is set to None (no OAuth or Basic Authentication).
• The REST endpoint can be accessed successfully when testing locally/directly.
• However, when the same VBCS application is opened from Oracle Fusion and attempts to fetch data from the ATP REST service, the request fails with the following browser error: Blocked by CORS policy:Permission was denied for this request to access the 'local' address space.