I have a Java based application (running on java 5 or higher) that establishes an SSL connection towards an Apache tomcat 7.0.47 on java 7.
From what I understand, to exploit POODLE you need a client that explicitly does out-of-protocol downgrading. Something that web browsers do all the time, but very few other clients do. So I wonder since both sides (server & client) are java based and not web browser if my application is at risk because of POODLE vulnerability?