Unauthenticated attackers can take over E-Business Suite, SOA Suite, Access Manager and JD Edwards across a single quarter's patch batch.
A 12-year-old PostgreSQL replication bug lets low-privilege backup accounts load code and become superusers.
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.