New posts in Padding Oracle Attack

Which padding is used by javax.crypto.Cipher for RSA

How serious is this new ASP.NET security vulnerability and how can I workaround it?