Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
https://exchange.xforce.ibmcloud.com/vulnerabilities/15473
http://www.securityfocus.com/bid/9877
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201713-1
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57517-1