Attackers can execute arbitrary code without authentication if Oracle's Identity or Web Services Managers are exposed to the Web.
Down big off its high, the sell-off in Oracle could be a buying opportunity for risk-tolerant investors.