I wonder what impact has Java vulnerabilities on application in Tomcat. For example Java 1.6u45 has many reported security bugs (Remote Security Vulnerability). You can easily exploit it on client side (ex. in Web browser) but I can't find any information how to exploit it in my WebApp in Tomcat using only HTTP access.
Should I worried about upgrade Java on server side? Maybe applications can work safely even with java 1.6?