FMW EBS_web.log errors on ModSecurity referencing security2.conf
We recently updated Java on our 12.2.6 EBS servers from 1.7.0_85 to 1.7.0_130. Our webtier is version 11.1.1.9.0 and we installed FMW patches 23630525 and 26045188. Our test environments seemed okay, but when we migrated this to production, I'm noticing errors in the FMW EM console:
[2021-09-22T06:54:50.0350-07:00] [OHS] [ERROR:32] [OHS-9999] [core.c] [client_id: 172.21.53.7] [host_id: comprodapp122.modesto.prv] [host_addr: 172.18.3.27] [tid: 140186558109440] [user: applprod] [ecid: 005n9NRaPYhDg^K6yV6iMG0001j^0000s9] [rid: 0] [VirtualHost: main] client denied by server configuration: proxy:balancer://oacorecluster_oajava/oracle/jinitiator/ProxySettings.class
[2021-09-22T07:08:40.1925-07:00] [OHS] [ERROR:32] [OHS-9999] [core.c] [host_id: comprodapp122.modesto.prv] [host_addr: 172.18.3.27] [tid: 140186574890752] [user: applprod] [ecid: 005n9OD5FbRDg^K6yV6iMG0001j^0000sJ] [rid: 0] [VirtualHost: main] [client 172.18.200.117] ModSecurity: Access denied with code 400 (phase 2). Invalid URL Encoding: Not enough characters at the end of input at REQUEST_URI_RAW. [file "/u01/oracle/prod/fs2/FMW_Home/webtier/instances/EBS_web_OHS1/config/OHS/EBS_web/security2.conf"] [line "59"] [id "100003"] [hostname "comprodapp122.modesto.prv"] [uri "/forms/frmservlet"] [unique_id "YUs46KwSAxsAABx-bFcAAAEI"]
0