Java can be used to execute code on your computer. It is easy enough to turn off on Firefox, see image below and read the guide in the link, takes 60 seconds. If 20,000,000 people turn off the Java, I bet they find a fix real fast.
That means the bad guys can do anything they want to your computer and your data.
Here is the basic data