A zero-day in Oracle E-Business Suite is being exploited in the wild to steal files from US corporations.