Oops...
Guess someone missed this...still no patch as well...
Oracle WebLogic Server Apache Connector Remote Code Execution
http://www.iss.net/threats/299.html
Oracle's post BEA Systems acquisition roadmap hits the ground running in the next two weeks with the delivery of version 10.3 of BEA's popular application server. WebLogic Server 10.3 has been released to manufacturing with customers expected to get final CDs in the next 14 days, senior vice president of Oracle server …