SearchOracle - Oracle: Users should patch flaws ASAP
"The three vulnerabilities were discovered more than a month ago by Stephen Kost of Integrigy Corp., a Chicago-based security consulting company specializing in customer relationship management (CRM) applications."
The link address is: http://searchoracle.techtarget.com/originalContent/0,289142,sid41_gci916447,00.html