WebLogic Server and WebLogic Express, Service Pack 4, are susceptible to cross site scripting flaws.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39306/ASPR-2005-05-24-1-PUB.txt
Source: https://packetstormsecurity.com/files/39306/ACROS-Security-Problem-Report-2005-05-24.1.html