Unspecified vulnerability in the Oracle BPEL Worklist Application component in Oracle Application Server 10.1.2.2 and 10.1.3.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, aka AS03.
http://www.vupen.com/english/advisories/2008/0180
http://www.vupen.com/english/advisories/2008/0150
http://www.us-cert.gov/cas/techalerts/TA08-017A.html
http://securitytracker.com/id?1019218
http://secunia.com/advisories/28556