Oracle tracks the CPU usage of its own sessions and presents it in
gv$sesstat. It may not be accurate, but the inaccurate data of one session
is somewhat accurately relative to that of others. So a serious offender
should stand out. Gv$sesstat joins to gv$session by SID and INST_ID for
the session info and to gv$statname by STATISTIC# and INST_ID to restrict by
statistic. You can start with 'CPU used by this session'.