TechWorld - Oracle E-Business hopelessly compromised by new hole

"Integrigy has detected multiple, highly critical vulnerabilities in Oracle E-Business Suite and Oracle Applications. Immediate patching is the only answer since, as Oracle itself puts it, “any user with browser access and specialised knowledge can exploit these vulnerabilities.” The vulnerabilities discovered by the security company's Stephen Kost affect E-Business Suite release 11i and all releases from 11.5.1 through 11.5.8, plus Oracle Applications 11.0, all releases."

The link address is: http://www.techworld.com/security/news/index.cfm?NewsID=1683