Oracle Java 7 Security Manager Bypass Vulnerability (CVE-2013-0422)

Oracle has in the last few hours released a Java 7 related security alert  : Oracle Java 7 Security Manager Bypass Vulnerability (CVE-2013-0422)

• https://blogs.oracle.com/security 
• http://www.oracle.com/technetwork/topics/security/alert-cve-2013-0422-1896849.html
• http://www.oracle.com/technetwork/topics/security/alerts-086861.html
• Patch Availability Document for Oracle Security Alert for CVE-2013-0422 [ID 1519244.1]

From the blog  : "To be successfully exploited, an attacker needs to trick an unsuspecting user into browsing a malicious website. "
From the published Security Alert : "Note: JDK and JRE 6, 5.0 and 1.4.2, and Java SE Embedded JRE releases are not affected."

From an EBS perspective :