Oracle Reports Developer component version 12.2.1.3 suffers from a cross site scripting vulnerability. Continue reading...