Hi All, During pentest i have noticed XSS bug in PORTAL.wwv_main.render_warning_screen application of oracle portal. http://somesite/pls/portal/PORTAL.wwv_main.render_warning_screen?p_oldurl=' &p_newurl=' Greets, d3nx