Oracle has confirmed that the vulnerability was being actively exploited in real-world environments.