The OHS component 1.0.2 through 10.x, when UseWebcacheIP is disabled, in Oracle Application Server allows remote attackers to bypass HTTP Server mod_access restrictions via a request to the webcache TCP port 7778.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20311
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1386
http://www.securityfocus.com/bid/13418
http://www.red-database-security.com/advisory/oracle_webcache_bypass.html