There is a lot of enterprise, server side Java running around. It wouldn't surprise me if there were a vulnerability that could be used to attack it.