Default preconfigured Oracle databse account, JBoss code execution, multiple administrative interface code executions.
vulners.com/securityvulns/securityvulns:doc:13532
vulners.com/securityvulns/securityvulns:doc:13533