Oracle XSQL servlet and xml-stylesheet allows code execution on server

Oracle version 8.1.7 could allow a remote attacker to execute Java on a Web server, due to a vulnerability in the XSQL servlet. The Oracle XSQL servlet allows Java to be executed by external XSLT stylesheets regardless of where they reside. A remote attacker could exploit this vulnerability to compromise the Web server.

http://xforce.iss.net/xforce/xfdb/5905

Confirmation Code:

   Please enter the code shown below