The gReport Controls Sort Widget in Oracle Application Express is prone to permanent cross site scripting. The setting "display as" of the column attributes is ignored for the filter list. Versions prior to 4.2.3.00.08 are affected.
c9ce7cae929b2bfcfbbd561c21486f566a196d3064d30611bb77669161526837
IBM Algorithmics RICOS versions 4.5.0 through 4.7.0 suffer from cross site scripting, cross site request forgery, information disclosure, data manipulation, broken encryption, and various other vulnerabilities.
945e5852d35d3f39d7bede3cae55f9fa93875250647822bf399c4895974db9cc
Oracle WebCenter Sites (formerly FatWire Content Server) suffers from remote SQL injection, cross site scripting, cross site request forgery, and authorization vulnerabilities.
2e58dbac366be3ceaec1dea852ec97d169c2fb12f50938bea3432feb91ee6b9b
EMC Documentum eRoom version 7.33.498.98 suffers from a cross site scripting vulnerability.
9339995995b0ec5644fade6d3de25a0a2a0bd885417c0336349031a156ec9ea2