Improper input validation in Oracle Platform Security for Java