EIP-2026-104378

This document describes a cross-site scripting (XSS) vulnerability in Oracle HTTP Server for Oracle Application Server 10g, caused by improper sanitization of the Expect header in HTTP requests. The vulnerability allows header injection attacks, potentially leading to session hijacking or content spoofing.