Дырка в Oracle JSP/SQLJSP

Можно получить доступ к любым файлам...

Oracle 8.1.7 - JSP/JSPSQL Remote File Reading

source: https://www.securityfocus.com/bid/2288/info A problem with Oracle on the Windows 2000 platform could allow users access to restricted information. This problem in the handling of input by the Oracle software may result in remote users being permitted read access to files on the same...

Padding Oracle Vulnerability in RSA Encryption

See https://framework.zend.com/security/advisory/ZF2015-10 it's essentially the same vulnerability...