Unspecified vulnerability in the JavaVM component in Oracle Database 11.1.0.7 and 11.2.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
http://www.us-cert.gov/cas/techalerts/TA10-103B.html
http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html