Mismanaged Session Cookie Issue Fixed for EBS in JRE 1.6.0_23

At last:  some good news for those of you affected by the mismanaged session cookie issue in E-Business Suite environments.  This issue is resolved by the latest Sun Java Runtime Environment 1.6.0_23 (a.k.a. JRE 6u23, internal version 1.6.0_23-b05).

See the 1.6.0_23 Update Release Notes for details about what has changed in this release.  This release is available for download from the usual Sun channels and through the 'Java Automatic Update' mechanism.

This JRE release has been certified with both Oracle E-Business Suite Release 11i and 12.  We recommend this release for all E-Business Suite users.

Related Articles



Is session can be maintain if disconnectivity occured between ebs midleware and database.

As ebs middleware and ebs databsase nodes installed separately on diffrent remote locations and due to network latency ebs database disconnected from ebs middleware, therefore at client/users session also disconnected and got disconnect error on form screen, user need to reloging on ebs again.

I like to know user session can maintain if db disconnect from middleware so that user dont prompt for reloging.

any mechanisim?

Posted by atif wasi on December 07, 2010 at 07:25 PM PST #


In theory, this is possible if you integrate Oracle Single Sign-On or Oracle Access Manager with an E-Business Suite environment. You can set the session timeouts for those products to be longer than the session timeouts for EBS. If the EBS session times out before the Oracle Single Sign-On or Oracle Access Manager sessions, then the latter authentication tools will restore the session without requiring another login.

I should emphasize that this is based upon my first-hand understanding of how session timeouts work. I have not validated this in an environment like yours (i.e. with app tier servers dropping database connections due to high network latency).

I would strongly recommend that you test this configuration to confirm that this will work in your environment.


Posted by Steven Chan on December 08, 2010 at 12:46 AM PST #

Hi Steven,

That's great news, thank you!

I see that Update 22 is still available on the java site:

Do you know when that will change to include Update 23?

I just downloaded and installed Update 22, and clicked on the Update button, but it said I already have the latest version.

While I can see that Update 23 is available on Oracle.com, I know that my desktop support colleagues who don't work with Oracle every day will often go to java.com to grab the latest version of Java, and so might not get Update 23 if they do that.



Posted by Jim on December 08, 2010 at 04:36 PM PST #

Hi Steve,

It seems this version is not available via the normal channels after all. Can you update us on the status?

Posted by Greg Ameres on December 08, 2010 at 09:24 PM PST #

Hi, Jim

I don't know why the site to which you've linked is still showing the older release.

The latest JRE 1.6.0_23 release is available immediately here:



Posted by Steven Chan on December 09, 2010 at 04:03 AM PST #

Hi, Greg,

I just checked what I consider the normal channels, and see this release available here:



Posted by Steven Chan on December 09, 2010 at 04:04 AM PST #

I will venture to say that to most non-oracle employees the normal channel is www.java.com and that site still has Version 6 Update 22. I appreciate you posting the url to where we can download Update 23.


Posted by Brad Moreland on December 10, 2010 at 06:14 AM PST #

Hi, Brad,

I'm not sure that I understand the reference to 'non-Oracle employees." The link I've provided above in the article, and twice in this comment thread, is:


Update 23 is available there to everyone, not just Oracle employees.

Please recall that I'm part of the E-Business Suite division and don't have any influence over the what gets posted to the Java.com domain. You may wish to log a Service Request against the Sun Java team if they haven't made Update 23 available there.


Posted by Steven Chan on December 10, 2010 at 06:37 AM PST #


I pushed this Java update out from my server when we were using version 17, I know there was a metalink doc for that, youhave a similar one or the same one for this? I can't find it. Thanks, Chris

Posted by Chris on December 16, 2010 at 03:16 AM PST #


It's unclear whether you're looking for EBS-specific documentation or generic JRE deployment documentation. The former is linked in the article above. For the latter, I just searched for JRE deployment guides; this is the best link that I could find:


If you're looking for other generic JRE documentation, the Sun JRE team might be able to provide additional pointers.

Good luck with your rollout of this update.


Posted by Steven Chan on December 16, 2010 at 03:49 AM PST #

Hi Steven,

I was very excited to see that this issue was resolved in 1.6.0_23 as we've been struggling with it for a while. I upgraded one of my EBS instances to use the new version. Unfortunately, it still hasn't resolved the problem. When a user tries to reprint a concurrent request, she gets the login page and not the reprint page. I've got an SR open. Is there anything else I should do?


Posted by Sharon Kovac on December 16, 2010 at 05:59 AM PST #

Hi, Sharon,

I'm sorry to hear that you may be experiencing an issue with this latest JRE release. Can you email or post your Service Request number? I'd like to have one of my Development engineers contact the Support engineer assigned to your Service Request to investigate this.


Posted by Steven Chan on December 16, 2010 at 06:07 AM PST #


I see that 1.6.23 is not available from www.java.com .

I can't upgrade my users right now because it is too close to year end to make a change. But I was excited to download it for myself just to see what happens. But I see, from the posting above, that someone is having a potential problem with it.

I think I will be paranoid and wait a little longer.


Posted by Alan on December 16, 2010 at 08:51 AM PST #


I don't generally comment on logged Service Requests here, but this seems to have broader relevance to our readers, and I don't want readers to get the wrong idea about this latest JRE release.

The issue that Sharon has reported for her environment is not reproducing in our testbeds with the latest release. It reproduces with the previous JRE 1.6.0_22 (i.e. the release known to have this problem).

In other words, we're currently investigating the hypothesis that Sharon's reported issue is a deployment or configuration issue that's specific to her environment, rather than the theory that the bug still persists.


Posted by Steven Chan on December 17, 2010 at 01:41 AM PST #

Thanks for the reply Steven. My Sr number is 3-2385507581. I appreaciate any help!


Posted by Sharon Kovac on December 17, 2010 at 01:49 AM PST #

Just another small postscript to follow up on Alan's comment: Java 6 Update 23 is available on java.com right now.


Posted by Steven Chan on December 17, 2010 at 05:32 AM PST #


We tested the SUN JRE Update 23. We experienced the difference in performance than the previous updates.Usually JRE use to be slower than Jinitiator, but thats now history. Update 23 is much faster than Jinitiator in response.

We did not face any issues with regards to reprints or republish.
All our internal testing is fine.

Thank you steven for your contribution and all others for their comments.

Best Regards,

Posted by Balaji Vasudevan on December 19, 2010 at 10:50 PM PST #

Hi, Balaji,

Thanks for letting us know that this release is working well for you. This is helpful feedback.


Posted by Steven Chan on December 20, 2010 at 01:41 AM PST #


It was more of a Generic how to. I used Metalink Doc 290807.1 to help Deploy Java 23 to my end users via the server. Do note for others that most steps in here do not need to be repeated if they were already done for a previous release of Java.

Thanks for the Help,


Posted by Chris on December 20, 2010 at 02:22 AM PST #

This is real good news. If I can compare JRE1.6.0_22b03 with 1.6.0_23-b05, what is major improvement with 1.6.0_23-b05?

Posted by zhang1993@gmail.com on December 20, 2010 at 06:19 AM PST #


Thank you very much for your attention to our problem with 1.6.0_23. I'm very happy to report that all is well. We had to completely uninstall all other versions of JRE. After we did that, the problems were gone.

Thank you very much!
Sharon Kovac

Posted by Sharon Kovac on December 20, 2010 at 09:09 PM PST #


Glad to hear that your issues were cleared up. That's great news; thanks for sharing that with us.


Posted by Steven Chan on December 21, 2010 at 01:22 AM PST #

New JRE releases include updates for performance and security. You can review the Release Notes for details; see the link above for pointers to those resources.


Posted by Steven Chan on December 21, 2010 at 01:26 AM PST #

I've been testing this new JRE version with Windows XP and Windows 7. In both Windows versions, our previous issue with Framework pages that are opened from a form (such as Salary screen or a report reprint screen) in a minimized state is no longer there. The screen opens up maximized.

However, I noticed an unusual occurance with Windows 7 that I cannot figure out. If I open a new IE (version 8) session from a desktop icon, go back to EBS and open up a Framework page from a form, the page does not pop open on the monitor anymore. I have to click on taskbar to get the window to appear. It does open in own Window session, since it still asks me if I want to close the window when I select "Close Window" from the Framework page.

However, if I use the Start menu or the task bar to open a new IE session, then I don't have this issue. I kind of stumbled upon this and have not pursued it with Oracle support yet since I don't know if it's just a configuration or Windows 7 thing - we're just getting new machines with Windows 7. I had a couple of my colleagues test it on their machines with the same results. This unusual issue does not appear on my existing Windows XP machine.

Posted by Doug on December 21, 2010 at 07:37 AM PST #

Hello everybody,

I also installed the new JRE23.
I could confirm that the bugs regarding cookies are fixed.

But it seems that there are some other issues:
- sometimes during forms starting a java security message pops up with the message ~"do you want to block unsecure components?"
- sometimes the forms window is closing right after starting without any message. After a new start of forms in the same session a forms error pops up (FRM-92050) and I have to restart the whole browser
- with version JRE17 it was possible to have some different sessions (test system, production,...) within one browser without any problems. With version 23 there are the mentioned problems.

Does anyone have similar problems with the new version?


Posted by Josef Reiterer on December 21, 2010 at 03:44 PM PST #

Hello Josef,

It would be best to raise SR with Oracle Support to investigate the issues you mention. I am not sure if you are using IE8, but Note 389422.1 discusses a similar sounding issue that you mention under "Multiple Sessions" section, so perhaps this would help your situation ?


Mike Shaw

Posted by Mike Shaw on December 21, 2010 at 04:34 PM PST #

Hello Doug,

It would be best to raise SR with Oracle Support to investigate the issues you mention. You could also perhaps try the workaround mentioned in Note 389422.1 in IE8 known issues section (using the -nomerge option) just to check if you are hitting this issue or not



Posted by Mike Shaw on December 21, 2010 at 04:39 PM PST #

Has anybody experienced increase in forms disconnect with this update. We went from version 15 to 23 recently and we have noticed that forms disconnect has increased by 20%


Posted by Sturla on February 17, 2011 at 12:15 AM PST #


I haven't heard of reports of increased latency with this release. Can you log a formal Service Request with the Java team so that we can investigate and track this?


Posted by Steven Chan on February 17, 2011 at 12:25 AM PST #

I installed jre 6 update 23. but still session problem exists.
I relaced jvm.dll file also. but no luck

Posted by guest on May 30, 2012 at 11:36 PM PDT #

Hi, Guest,

I'm sorry to hear that you've encountered an issue with this. You shouldn't have to replace any DLLs to get this to work properly.

We can provide general conceptual guidance here, but I'm afraid that this blog isn't the best place to get technical support for specific issues like the one that you're working through.

Your best bet would be to log a formal Service Request via My Oracle Support (formerly Metalink) to get one of our specialists engaged.

Please feel free to forward your Service Request number to me if it gets stuck in the support process for some reason.


Posted by Steven Chan on May 31, 2012 at 11:18 AM PDT #

Hi Steven,

The problem still persist,
Service Request number : 3-5716704521

On JRE 1.6.0_07 its working fine. when the JRE is upgraded to 1.6.0_18, It stopped working like - Login page is rendering again..

Hence we installed JRE 1.6.0_23, but still the problem persists.


Posted by Rekha on June 12, 2012 at 12:48 AM PDT #

Hi, Rekha,

I'm sorry to hear that your Service Request is still open. I've contacted the Support engineer assigned to your Service Request directly; please monitor your SR for updates.


Posted by Steven Chan on June 12, 2012 at 08:59 AM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed


« June 2016