The FTC alleged that Oracle promised consumers ... the updates removed some of the problematic software but left behind older versions of Java which were vulnerable to being hacked.