The Oracle Applications Framework component in Oracle E-Business Suite 12.0.6 and 11i10CU2 uses default passwords for unspecified "FND Applications Users (not DB users)," which has unknown impact and attack vectors.
http://www.us-cert.gov/cas/techalerts/TA09-105A.html
http://www.securitytracker.com/id?1022056
http://www.securityfocus.com/bid/34461
http://www.oracle.com/technetwork/topics/security/cpuapr2009-099563.html