Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.2.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2009-0974 and CVE-2009-3407.
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
http://www.securitytracker.com/id?1022055