As far as I know it isn't. Especially when you consider that most middleware today is written in Java (IBM's WebSphere, Sun's iPlanet, BEA's WebLogic, HP's BlueStone, etc.). These are the big boys of webservers, so I think that you should be ok. But by all means, you should try to find out any info on possible security holes.