Oracle Workflow is part of the database or application server installation. The parameter response form is vulnerable against XSS/CSS attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40912/oracle-wf_monitor.txt
Source: https://packetstormsecurity.com/files/40912/oracle-wf_monitor.txt.html