Trusteer, an IBM subsidary, has a couple of telling infographics regarding Java-based malware:

Distribution by type of vulnerability

Growth of Java vulnerabilities