A few links on the issue:
Homeland Security warns to disable Java amid zero-day flaw | ZDNet
New Java vulnerability is being exploited in the wild, disabling Java is currently your only option - The Next Web
Oracle’s Java vulnerability left open since October 2012 ‘fix’, now being used to push ransomware - The Next Web
EDIT - I'm an idiot. Java is not the same as JavaScript. Ignore me.