Comment Re:What about in house applets? (Score 1) 111
You seem to be confusing some very different issues: Java code running in J2EE on servers, and users running Java applications on their client machines.
For sure Oracle totally screwed up their client machine warnings to users, and I'm still not convinced they have got it right, its nearly impossible to understand Oracle's documentation or make it work as advertised.
On the other hand, servers aren't particularly vulnerable to most of these exploits because they assume you already have the ability to run the code in question. J2EE servers don't let just anyone run code.