Unspecified vulnerability in the Application Express component in Oracle Database Server before 5.0 allows remote authenticated users to affect availability via unknown vectors.
http://www.securitytracker.com/id/1032903
http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html