Or Hanuka

**Name of the Vulnerable Software and Affected Versions** Oracle Demantra Demand Management versions 12.2.4 through 12.2.5.1 **Description** The issue is related to insufficient access control in the Security component of Oracle Demantra Demand Management, allowing a remote attacker to gain unauthorized access to protected information via the HTTP protocol. Successful attacks may require human interaction and can significantly impact additional products, resulting in unauthorized update, insert, or delete access to some accessible data. **Recommendations** For versions 12.2.4 through 12.2.5.1, consider restricting access to the Security component until a patch is available. As a temporary workaround, limit network access via HTTP to minimize the risk of exploitation. Avoid using the affected Oracle Demantra Demand Management product until the issue is resolved.