There is a vulnerability in Oracle Web Listener where a resource can be accessed when is shouldn't be able to be accessed.