Moved from "Forms" to "WebLogic Security" forum.
Note that we do not discuss security issues. It is important that you always run supported product versions and apply the latest Critical Patch Updates. Note that all FMW versions older than 12.2.x are no longer entitled to Premier Support (see LSP below). If you are not already using WLS 220.127.116.11 (the latest), it is strongly recommended that you upgrade. If you believe you have identified a vulnerability, please contact Oracle immediately. The process for doing that is explained on the Critical Patch Update site (URL below). Here are some important references:
Critical Patch Updates
Lifetime Support Policies (LSP)