Oracle Java Cloud Service apps face additional risks after a researcher publishes new vulnerabilities and how to attack them.