What is Oracle's policy for reporting security vulnerabilities?
Customers and security researchers can report suspected security vulnerabilities through designated support systems or by other specified channels.