Kofax MarkView 10.3.0 Fix Pack 5
Build date: January 31, 2024
© 2024 Tungsten Automation. All rights reserved.
Use is subject to license terms.
Introduction
Install Kofax MarkView 10.3.0.5 to resolve the issues listed below.
Note: Install Kofax MarkView 10.3.0.5 only after a full installation of Kofax MarkView 10.3.0 or on top of any previously installed 10.3.0 fix packs.
For a full product installation, see the Kofax MarkView Installation Guide for instructions.
Issues resolved in this fix pack
ID | Issue | Solution |
---|---|---|
2070605 | AUSS sync did not work properly and produced the following error message: "ORA-02291: integrity constraint (MARKVIEW.MV_AUSS_SRC_GRP_MEM_USER_ID_FK) violated - parent key not found." |
AUSS code changed to handle the root cause scenario where a user has the "External" person type in Oracle EBS. |
2068346 | Import Server returned an error while processing specific PDFs. | Upgraded the PDF library. |
2067188 | Request to upgrade the Log4j library. | The Log4j library was upgraded from version 1 to 2. |
2039780 | MarkView Import produced error messages, such as "Processing of existing file [file name] failed while trying to upload [file name]" and "Destination file [file name] already exists." | The maximum sequence value and file name length have been increased. |
1941430 | In MarkView -> Web Inquiry -> AP Invoices, a missing UPPER keyword in the mverp_wda_dflt_ext_pb package body resulted in missing search results. |
Added UPPER to the query to make search case-insensitive. |
List of issues resolved in previous fix packs
Fix Pack 4
1941368: On Alternate User Assignment page and Support Tools, when entering the lowercase User ID or User ID that does not exist in the system, a 500 error appeared
1936732: Export Requests (Print or Email) from Viewer failed using https
with the following exception: Received fatal alert: handshake_failure javax.net.ssl.SSLHandshakeException
1959623: Impossible to email from the MarkView 10.3.0.3 Viewer
1963767: When doing a Get Next from the Oracle EBS Supplier page, the "Request Denied" message appeared
1971821: F5 Load balancer server request response returned incorrect data type in the Content-Type header causing missing menus
Fix Pack 3
1912398: Verification of incoming HTTP request and cookies attribute added to improve security
1908990: In mv_document table and other related MarkView tables, document_id values were too large for the column
1901515: When using the latest version of Google Chrome and Microsoft Edge, the Viewer did not always show Quick Info
1882180: Parameter checking added to improve security
1863724: Verify terminates showed the following error: "...by the JMX call does not have the right format. At least one dot is expected."
1857298: Impossible to send emails through the Viewer using OAuth
1842559: Web application security improved
1842558: SQL security improved
Fix Pack 2
1802415: Encountering an issue when coding an invoice with NON billable project coding
1775797: Need to convert the "mvap_ipa_pkg.RefreshPOTables" dbms job to Scheduler job
1775789: Errors When Approving An Invoice Via MarkView Mobile Link
1775787: Viewer Does Not Display All Layers of Certain PDF Files Ingested via Import Server
1734106: AUSS experiencing major performance issues with synchronization
1734090: After applying Oracle patch for Log4j vulnerability, MarkView is negatively impacting core Oracle functionality
1698724: 500 Internal Server error trying to update or create user record due to 'comor' being added to url in referrer
1679529: KTM Validation Blanket PO Corrected Quantity Not Reflected in Receipt Lines Field
Fix Pack 1
1713746: Mail Gateway: Outbound emails stopped processing when the recipient's address was invalid
1713745: Mail Gateway: Inbound emails stopped processing when the 'To' address was empty
1712543: Mail Gateway closed all windows after clicking OK on the Instance Preferences window
1712540: Mail Gateway created an extra connection for POP protocol that caused the test connection to fail
1712537: When MAPI protocol was selected for Outbound and Inbound services, the Username, Port and Timeout fields had to be disabled
1712534: With MAPI protocol selected, leaving the Port and Timeout fields empty, resulted in incorrect validation
1712531: With SMTP protocol selected, username validation failed for the Outbound service
1712530: With MAPI protocol selected, The 'Enable Authentication' function was unexpectedly available for Inbound and Outbound services
1712529: SMTP connection failed if an SSL port 465 was specified for the Outbound service
1712528: With SMTP, POP or IMAP protocol selected, the SSL connected successfully even with SSL disabled
1712524: With SMTP protocol selected, authentication failed for the Outbound service
1708162: When attempted to open Online Help from MarkView 10.3, the Online Help for MarkView 10.2 appeared instead
1697380: After setting the 'MVERP_DFM_DEFAULT_AMOUNT' preference to FALSE, new lines could have no longer been added in the viewer
Applies to
This fix pack is based on Kofax MarkView for Accounts Payable 10.3.0.
Only apply this fix pack to the MarkView 10.3.0 application server; do not run the
fix pack installer on a MarkView Oracle Objects installation.
Verify that the version of all installed MarkView components (such as Self-Service Invoices, Document Library, Expenses) is 10.3.0.
For information about system requirements, see the Kofax MarkView 10.3.0 Planning Guide and the Technical Specifications document on the Kofax MarkView Product Documentation website.
Applying this fix pack multiple times on the same system causes no harm. Also, fix packs are cumulative for a release, so you do not need to install previous 10.3.0 fix packs before applying this latest fix pack.
This fix pack includes files that are staged on the application server and that require manual steps, which are included in the sections that follow.
Files included
This fix pack includes the following files:
File name | Version |
---|---|
KofaxMarkView-10.3.0.5.zip | 10.3.0.5 |
ReadMe-KofaxMarkView-10.3.0.5.htm | N/A |
Install this fix pack
Use the following procedures to install the fix pack.
MarkView Application Server installation (includes Database Components)
Only apply this fix pack to the MarkView 10.3.0 application server.
Before starting the following procedure, read this entire ReadMe file.
Silent installation preparation
If you used the silent installation method to install MarkView 10.3.0 and you plan to use the same method to install the fix pack, perform the following actions.
Go to the distribution > conf folder.
Open the preliminary_interview.properties file.
Complete the properties file information, but leave the SelectedProducts.selected_products parameter blank.
Run the generateInterviewTemplate script to create or update the installer_interview.properties file.
Open the installer_interview.properties file.
Complete the properties file information according to the Kofax MarkView 10.3.0 Upgrade Guide.
Apply the fix
Log in to the application server as the user who installed MarkView 10.3.0.
Ensure that the environment variables required for installing MarkView 10.3.0 are defined.
See the Kofax MarkView 10.3.0 Upgrade Guide for information about setting environment variables and other settings required to run the installer.Locate the base MarkView directory where MarkView is installed. Use this path name when prompted for the "Install Directory" during installation.
The base MarkView install directory includes the following files:- target_registry.properties
- thirdparty.txt
Extract the KofaxMarkView-10.3.0.3.zip file into a new directory on the application server where MarkView 10.3.0 is installed.
Verify that the system is quiet to ensure that the data remains synchronized.
Log in to an SQL*Plus command window as the MarkView schema user.
Stop the currently running database user jobs by executing the breakDBJobs.sql script, which is included in the following MarkView 10.3.0 installation distribution directory:
<MARKVIEW-10.3.0-INSTALLER>/modules/installer-dist-10.3.0/installer-db
where <MARKVIEW-10.3.0-INSTALLER> is the base directory of the MarkView 10.3.0 installation distribution.To run the installer, invoke the installation script in the bin directory of the fix pack distribution (install.bat|sh or install_silent.bat|sh).
See the Kofax MarkView 10.3.0 Upgrade Guide for information on running the installer.
The installer shows a list of all 10.3.0 fixes in the fix pack.Provide answers to any unspecified values in the installer windows.
Use values that match those provided during version 10.3.0 installation.
(If available, use the installation worksheet that was completed for MarkView 10.3.0.)
Note: Install the fix pack in the same target directory specified for the MarkView 10.3.0 installation.
If you run the installer and see pre-populated information for the wrong environment, such as production URLs when running against a non-production environment, update the fields manually in the installation window.
If you install this fix pack on WildFly, do one of the following:
For standalone mode:
In the Enter App Server information for MarkView applications, leave the Domain field blank.For domain mode:
In the Enter App Server information for MarkView applications, enter your domain name in the Domain field.
When the installation is completed, follow any on-screen instructions that appear in the installation summary window.
Restart the application server.
To ensure that all database objects are compiled successfully, follow the instructions in the "Check for invalid packages" section of Chapter 5 of the Kofax MarkView 10.3.0 Upgrade Guide.
Log in to an SQL*Plus command window as the MarkView schema user.
Start database user jobs by executing the startDBJobs.sql script found in the following MarkView 10.3.0 installation distribution directory:
<MARKVIEW-10.3.0-INSTALLER>/modules/installer-dist-10.3.0/installer-db
where <MARKVIEW-10.3.0-INSTALLER> is the base directory of the MarkView 10.3.0 installation distribution.
In a clustered environment, point to one server, then propagate to other nodes in the cluster using the appropriate process for your application server.If you plan to install Import Server or you have Import Server 10.3, verify that you clear the Verify Upload option on the Import tab of the MarkView Import Server Preferences window.
Capture and Output components for MarkView 10.3.0
The following Capture and Output components for MarkView were updated as part of the 10.3.0 Fix Pack 1:
- The MarkView Mail Gateway was updated as part of the 10.3.0 Fix Pack 1.
To install or upgrade the MarkView Mail Gateway, run the msi file from:
<MARKVIEW-INSTALL-DIR>/misc/10.3.0/FIX16526/sfMailService.Installer.msi
Configure MarkView Mail Gateway on a machine with KTM installed.
MarkView post-installation steps (WildFly and FileNet only)
If you are installing this fix pack on a WebLogic Application Server, or if you do not use the FileNet server, skip this section.
If you are installing this fix pack on a WildFly Application Server and you use the FileNet server, perform the following post-installation steps:
Back up $JBOSS_HOME/standalone/configuration/standalone.xml.
Open $JBOSS_HOME/standalone/configuration/standalone.xml and locate the following tag:
<subsystem xmlns="urn:jboss:domain:security:1.2">
Within
<subsystem xmlns="urn:jboss:domain:security:1.2">
, locate the<security-domains>
tag and add the following strings:
<security-domain name="FileNetP8WSI" cache-type="default">
<authentication>
<login-module code="com.filenet.api.util.WSILoginModule" flag="required"/>
</authentication>
</security-domain>Save the file and restart the WildFly Application Server.
Oracle Forms Integration
Apply FIX18102
Starting from version 10.3.0.3, the fix pack contains FIX18102 for the folowing bug:
Bug 1908990: In mv_document table and other related MarkView tables, document_id values are too large for the column.
If you already applied this fix, skip the steps.
To apply FIX18102:
Log in to the operating system where the Oracle ERP server is installed as the owner of the Oracle ERP system.
Copy the MVOAUTIL.pll file from:
<MARKVIEW-INSTALL-DIR>/misc/10.3.0/FIX18102
To:
$c_MARKVIEW_TOP/MVOA/6.1.0.0/libraries
where <MARKVIEW-INSTALL-DIR> is the base directory where MarkView is installed.Back up the previous version of $c_MARKVIEW_TOP/MVOA/<version_number>/libraries/MVOAUTIL.plx.
Compile MVOAUTIL.pll into MVOAUTIL.plx using your valid connection string value:
frmcmp userid=apps/apps-pw@connectstring module=$c_MARKVIEW_TOP/MVOA/<version_number>/libraries/MVOAUTIL.pll module_type=LIBRARY compile_all=YES
Note: If you copy and paste from this file, remove any line breaks.Back up the previous version of $AU_TOP/resource/MVOAUTIL.plx.
Copy the MVOAUTIL.plx file from:
$c_MARKVIEW_TOP/MVOA/<version_number>/libraries
To:
$AU_TOP/resource
Apply FIX16695
Starting from version 10.3.0.2 the fix pack contains FIX16695 for the following bug:
Bug 1734090: After applying Oracle patch for Log4j vulnerability, MarkView is negatively impacting core Oracle functionality
If you already applied this fix, skip the steps.
To apply FIX16695:
Log in to the operating system where the Oracle ERP server is installed as the owner of the Oracle ERP system.
Change directory to <MARKVIEW-INSTALL-DIR>/misc/10.3.0/FIX16695:
cd <MARKVIEW-INSTALL-DIR>/misc/10.3.0/FIX16695
where <MARKVIEW-INSTALL-DIR> is the base directory where MarkView is installed.Extract files from mvoa_patch.zip archive into $JAVA_TOP directory:
unzip -o -d $JAVA_TOP mvoa_patch.zip
Change directory to $JAVA_TOP:
cd $JAVA_TOP
Remove log4j classes from $JAVA_TOP if they exist:
rm -f log4j.jar log4j.properties
rm -rf org/apache/log4j
rmdir --ignore-fail-on-non-empty org/apache orgFor Oracle EBS 12.2.x only:
- Back up the previous version of $JAVA_TOP/customall.jar file.
- Run adcgnjar utility to recreate and sign $JAVA_TOP/customall.jar file:
adcgnjar
(Enter APPS schema name and password when prompted.)
Restart the Oracle ERP system.
Issues resolved in previous fix packs
Issues Resolved in Fix Pack 4
FIX19200 addresses COD19200
Bug 1963767: When doing a Get Next from the Oracle EBS Supplier page, the "Request Denied" message appeared
Summary of changes: The .ear
files were replaced.
Impact of changes: No additional impact.
Patch testing: It has been verified that on the Oracle EBS Supplier page, the Get Next option now works correctly using different browsers.
FIX19109 addresses COD19109
Bug 1971821: F5 Load balancer server request response returned incorrect data type in the Content-type header causing Missing menus
Summary of changes: Added the "X-Content-Type-Options" security header to server response and set appropriate "Content-type" header value.
Impact of changes: No additional impact.
Patch testing: The general MarkView functionality has been tested. It has been verified that almost all requests contain the "X-Content-Type-Options" header with the "nosniff" value.
FIX19108 addresses COD19108
Bug 1959623: Impossible to email from the MarkView 10.3.0.3 Viewer
Summary of changes: Now you can send emails without using login and password.
Impact of changes: No additional impact.
Patch testing: The possibility of sending emails from Markview Viewer with enabled and disabled authentication on the mail server was tested.
FIX18737 addresses COD18737
Bug 1941368: On Alternate User Assignment page and Support tools, when entering the lowercase User ID or User ID that does not exist in the system, a 500 error appeared
Summary of changes: Changed the display of an error when a user enters a User ID that does not exist in the system.
Impact of changes: No additional impact.
Patch testing: Tests with uppercase and lowercase in the User ID were performed.
FIX18714 addresses COD18714
Bug 1936732: Export Requests (Print or Email) from Viewer failed using https
with the following exception: Received fatal alert: handshake_failure javax.net.ssl.SSLHandshakeException
Summary of changes: Now sending emails is done directly through java code.
Impact of changes: No additional impact.
Patch testing: It has been verified by sending emails and print requests on SSL application servers for users and groups.
Issues Resolved in Fix Pack 3
FIX18186 addresses COD18186
Bug 1863724: Verify terminates showed the following error: "...by the JMX call does not have the right format. At least one dot is expected."
Summary of changes: Added the ability to run installer in an environment where WebLogic would return its version in multi line format.
Impact of changes: No additional impact.
Patch testing: It has been verified by installing MarkView on all supported versions of application servers.
FIX18102 addresses COD18102
Bug 1908990: In mv_document table and other related MarkView tables, document_id values were too large for the column
Summary of changes: Changed type for some fields from NUMBER(8) to NUMBER(11).
Impact of changes: No additional impact.
Patch testing: It has been verified by modifying document ID with valid and invalid values.
FIX18084 addresses COD18084
Bug 1857298: Impossible to send emails through the Viewer using OAuth
Summary of changes: Added the ability to send emails using OAuth.
Impact of changes: No additional impact.
Patch testing: It has been verified by sending mails through Microsoft and Google services from MarkView Viewer. Mail adress should not be over than 30 characters for now.
FIX17893 addresses COD17893
Bug 1901515: When using the latest version of Google Chrome and Microsoft Edge, the Viewer did not always show Quick Info
Summary of changes: When using the latest version of Google Chrome and Microsoft Edge, the Viewer now always shows Quick Info.
Impact of changes: No additional impact.
Patch testing: It has been verified by opening, reloading, refreshing, and redirecting to the Quick Info section in different browsers.
FIX17824 addresses COD17824
Bug 1882180: Parameter checking added to improve security
Summary of changes: Added checking of incoming request parameters.
Impact of changes: No additional impact.
Patch testing: It has been verified that when sending valid and invalid request input values, all invalid input values are filtered out.
FIX17822 addresses COD17822
Bug 1912398: Verification of incoming HTTP request and cookies attribute added to improve security
Summary of changes: Added verification of incoming HTTP request for validity Origin and Referer headers. Added SameSite cookies attribute for MarkViewCookie.
Impact of changes: No additional impact.
Patch testing: It has been verified by using links in mails from external mailboxess and buttons from Oracle EBS to MarkView.
FIX17821 addresses COD17821
Bug 1842559: Web application security improved
Summary of changes: The second parameter is forced to be validated by checking against the whitelist of the supported rule names. If the ruleName parameter shows up with an invalid value, an error page opens.
Impact of changes: No additional impact.
Patch testing: It has been verified that it is impossible to enter a JavaScript snippet to build it into the response page and pass it over to the user.
FIX17820 addresses COD17820
Bug 1842558: SQL security improved
Summary of changes: The input is validated and all invalid request input values are filtered out and not used in the underlying SQL queries.
Impact of changes: No additional impact.
Patch testing: It has been verified that all invalid request input values are filtered out and not used in the underlying SQL queries.
Issues Resolved in Fix Pack 1
FIX16562 (addresses COD16562): Current Online Help version now opens correctly for MarkView 10.3
Bug 1708162: When attempted to open Online Help from MarkView 10.3, the Online Help for MarkView 10.2 appeared instead
Summary of changes: Corresponding link has been changed in the preference table.
Impact of changes: No additional impact.
Patch testing: Now the help link goes to MarkView 10.3 Online Help.
FIX16526 (addresses COD16526): Resolving a number of Mail Gateway connectivity and UI issues
Bug 1713746: Mail Gateway: Outbound emails stopped processing when the recipient's address was invalid
Bug 1713745: Mail Gateway: Inbound emails stopped processing when the 'To' address was empty
Bug 1712543: Mail Gateway closed all windows after clicking OK on the Instance Preferences window
Bug 1712540: Mail Gateway created an extra connection for POP protocol that caused the test connection to fail
Bug 1712537: When MAPI protocol was selected for Outbound and Inbound services, the Username, Port and Timeout fields had to be disabled
Bug 1712534: With MAPI protocol selected, leaving the Port and Timeout fields empty, resulted in incorrect validation
Bug 1712531: With SMTP protocol selected, username validation failed for the Outbound service
Bug 1712530: With MAPI protocol selected, The 'Enable Authentication' function was unexpectedly available for Inbound and Outbound services
Bug 1712529: SMTP connection failed if an SSL port 465 was specified for the Outbound service
Bug 1712528: With SMTP, POP or IMAP protocol selected, the SSL connected successfully even with SSL disabled
Bug 1712524: With SMTP protocol selected, authentication failed for the Outbound service
Summary of changes:
- SMTP authentification flag handling has been changed to enable authentification.
- Connection security options have been changed to proper logic.
- All irrelevant controls of the Mail tab have been disabled for MAPI protocol selection.
- A credential validation for SMTP preferences has been added which is applied only for enabled authentication mode.
- Port and timeout validation has been disabled for inactive mode (Inbound or Outbound) and for MAPI mode.
- All disabled text inputs have been colored with grey.
- Excess connection for POP3 has been removed.
- Inconsistent Preferences dialog behaviour has been fixed.
- In case of empty To field in a email message, it is replaced with a space for database compatibility.
- Sending email procedure has been changed for invalid recipient address cases. Now it makes a detailed record in the log, then switches to the next acquired item. Recipient address creation has got a special try block to detect if the trouble is in the address itself.
- Aspose Email library has been updated to version 21.9.
Impact of changes: No additional impact.
Patch testing:
- SMTP authentication for Outbound in Mail Gateway now works correctly and notification emails with invoices to approve/reject are successfully sent to a user.
- Now SSL checkbox allows both to enable and disable SSL connection.
- Enable Authentication, Enable OAuth and OAuth Credentials controls are getting disabled on MAPI selection, if selection changes to POP, SMTP or IMAP they're getting enabled again. Enable OAuth checkbox does not preserve its value on switch to MAPI, to indicate that OAuth is not enabled, while control is unavailable. It has been also verified that password field is not disabled on MAPI selection.
- SMTP preferences form validates if SMTP username is non-empty when authentication is enabled.
- Inactive protocol (i.e. OUTBOUND protocol for Inbound instance) does not produce validation warning in case of empty port and timeout fields.
- Username, Port and Timeout fields are grey when MAPI protocol is selected.
- Duplicate connection in POP3 mode has been removed, client connects only once.
- Preferences dialog opened with double click on selected instance does not close Instance selection dialog.
- Inbound emails are still processing without any errors even if a message had empty To field.
- Outbound emails are still processing and a detailed error record appears in the Event Log if a recipient address is invalid.
- Regression testing in scope of approve/reject invoices by email has been provided.
FIX15255 (addresses COD15255): User can now add lines if the preference MVERP_DFM_DEFAULT_AMOUNT is set to FALSE
Bug 1697380: After setting the 'MVERP_DFM_DEFAULT_AMOUNT' preference to FALSE, new lines could have no longer been added in the viewer
Summary of changes: If the MVERP_DFM_DEFAULT_AMOUNT preference is FALSE, the default amount is set to 0 and not undefined.
Impact of changes: No additional impact.
Patch testing: User can successfully add lines in the MV Viewer when the preference MVERP_DFM_DEFAULT_AMOUNT is FALSE. The default value 0 has been set to line amount.