An argument rages in the ePress between Oracle and Litchfield
"Oracle and a security researcher are trading heated barbs over a vulnerability in the company's software that has gone unpatched since it was discovered in October.
Oracle is warning its customers not to use a workaround written by David Litchfield for a security vulnerability, saying the suggested workaround could break its software."
This is an excellent article highlighting the current state of Oracle Security.