C-Note-06-023: Oracle Critical Patch Update - October 2006 (10/19/06)
Oracle has released a Critical Patch Update which is a collection of patches for multiple security vulnerabilities. One in particular is Vuln# APEX01. The component is Application Express, Protocol HTTP, remote exploit without auth., Yes.

This advisory is posted at: http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html

CIAC would like to thank Oracle for this information.