Technology Stack - EBS (MOSC)

MOSC Banner

Is frmservlet.jnlp download required to access Oracle EBS forms?

in Technology Stack - EBS (MOSC) 1 commentAnswered

we are investigating if frmserverlet.jnlp is required to be downloaded to access forms in Oracle EBS. Our auditors raised security concerns and potential possibility of a virus. Anyone else encountered any issues or it or can provide any ideas, guidance or suggestions where this download will not be needed with Chrome browser.

Allowing frmservlet.jnlp introduces elevated risk because it enables dynamic execution of remotely delivered Java applications on endpoints, bypassing modern browser protections and relying on legacy Java Web Start components that are deprecated and difficult to secure. Primary risks include remote code execution, weakened trust controls via certificate exceptions, and exposure to insecure download channels, so usage should be tightly controlled to trusted internal sources with strong compensating controls (application allow-listing, certificate validation, network restrictions) and a defined roadmap to eliminate JNLP dependency.

Tagged:

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

EBS TechStack Tags

Instructions for posting

×

1. Select a discussion category from the picklist.


2. Enter a title that clearly identifies the subject of your question.


3. In the body, insert detailed information, including Oracle product and version.


Please abide by the Oracle Community guidelines and refrain from posting any customer or personally identifiable information (PI/CI).


Cloud / Fusion customers - Our Cloud community has moved! Please go to Cloud Customer Connect .


New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center