What kinds of Java software is vulnerable to the recent (late 2012 onwards) onslaught of attacks?
<p>The latest victim is Facebook and allegedly twitter. <a href="http://securitywatch.pcmag.com/none/308172-facebook-attackers-exploited-java-zero-day-bug" rel="nofollow">http://securitywatch.pcmag.com/none/308172-facebook-attackers-exploited-java-zero-day-bug</a></p>

<p>From articles I have read, it seems that Java "applet" web extensions (which come with windows JRE packages) are the attack vectors. </p>

<p>But are other categories of java-based software vulnerable; for example java PC applications (like Eclipse) or servers (like Tomcat)?</p>
