Oracle announced a zero day vulnerability today - http://www.oracle.com/technetwork/topics/security/alert-cve-2012-1675- 1608180.html
Looks like a man in the middle attack.
For CF8 or CF9, can the native oracle driver be configured to use SSL/TLS?
North America
Europe, Middle East and Africa
Asia Pacific