Oracle Java SE and JRE contain a flaw in the JAX-WS component that may lead to unauthorized disclosure of potentially sensitive information. The issue is due to an unspecified error, which may allow a remote attacker gain access to unspecified sensitive information.