Oracle Java SE 7 Update 21 fixes an unspecified vulnerability in the Install component (CVE-2013-2425). Upstream has CVSSv2 scored this issue as: 10.0/AV:N/AC:L/Au:N/C:C/I:C/A:C External Reference: http://www.oracle.com/technetwork/topics/security/javacpuapr2013-1928497.html
This issue has been addressed in following products: Supplementary for Red Hat Enterprise Linux 5 Supplementary for Red Hat Enterprise Linux 6 Via RHSA-2013:0757 https://rhn.redhat.com/errata/RHSA-2013-0757.html
According to IBM Java security alerts page, this issue did not affect IBM JDKs: http://www.ibm.com/developerworks/java/jdk/alerts/#Oracle_April_16_2013_CPU