Unspecified vulnerability in the OJVM component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows remote administrators to affect confidentiality, integrity, and availability via unknown vectors.
http://www.securitytracker.com/id/1037035
http://www.securityfocus.com/bid/93615
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html