Unspecified vulnerability in the Application Express component in Oracle Database Server before 4.2.6 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
http://www.securityfocus.com/bid/70480
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html