Oracle Supply Chain Products Suite
The issue affects confidentiality and integrity, and it is related to JRAD Heartbeat. There are claims that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via three unspecified parameters in an unknown JSP file.