Is there any evidence that the the POODLE SSL or TLS has actually been proven to be a risk for file transfer like SecureFTP etc...? ...or is it just a theoretical exposure?
The POODLE attack is actually very hard to pull off in real world conditions. A SecurityMetric blog post lays it out well:
Here’s an explanation of how an attack would have to take place in order for an attacker to exploit POODLE and assume the user’s identity on the target site.
The victim must be logged into a site using HTTPS (and the session cookie must not be expired)
The victim must browse to another website over HTTP before the session cookie expires
The attacker must inject ~5,000 requests in order to decrypt the session cookie
Basically, this attack is extremely difficult because both the merchant and the user have to be vulnerable.
So to answer your question, this risk leans heavily to the theoretical side. I haven't found any news stories, blog posts, or security advisories saying that this exploit has been confirmed in the wild. POODLE has a high barrier to execution, and it's paid off.