A vulnerability has been detected in Sun Microsystem's java system communications express web-based collaboration application.