This link reflects the extension pack, not Virtualbox itself, which is CDDL licensed.
Virtualbox represents exactly as much threat to your business as an OpenIndiana or FreeBSD server. Are you sure that a sysadmin is not using (CDDL licensed) ZFS?
That's the point, yeah. Virtualbox is CDDL. Extension pack is not. Using virtualbox doesn't hurt, they got nailed because of the extension pack.
Watch your licenses. Oracle Java JRE/JDK switched to a proprietary commmercial license (it's time to switch to openjre/openjdk including on the desktop. You're either out of date on patches or running oracle non-cddl code (prepare to bend over)
Virtualbox represents exactly as much threat to your business as an OpenIndiana or FreeBSD server. Are you sure that a sysadmin is not using (CDDL licensed) ZFS?