Until Oracle released a patch to the zero-day Java flaw, the only solution was removal of Java. Such a task is non-trivial, since most endpoint mgmnt tools can't see all computers and you can't manage what you can't see. This is troublesome for an enterprise's 100s (or 100s of 1,000s) of mobile devices incl'g laptops, smartphones, tablets, etc. that aren't on the corporate network.
Conversely, IBM Endpoint Manager provides IT with real-time visibility and control of ALL endpoints, regardless of OS, location or b-width, incl'g patching of 3rd party apps like Java: http://ibm.co/iaujMM