Of course, Oracle is immune to all vulnerabilities... NOT!

http://www.oracle.com/technology/deploy/security/pdf/2003alert61.pdf
http://www.computerworlduk.com/management/security/cybercrime/news/index.cfm?newsid=6106

And if you don't know how to attack a Oracle database, Oracle itself will show you how to do it:
http://www.securitypronews.com/news/securitynews/spn-45-20060412OracleSlipsHowToAttackOwnDatabases.html

>These links say it all:
>
>http://www.informationweek.com/news/showArticle.jhtml;jsessionid=Z1O1GX5OZ4VR4QSNDLRSKHSCJUNN2JVN?articleID=205600157
>
>http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9055858&intsrc=hm_list