Tzachy Horesh

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 80.0.3987.87 **Description** The issue is related to insufficient validation of untrusted input in the Omnibox feature of Google Chrome, allowing a remote attacker to perform domain spoofing via IDN homographs by using a crafted domain name. This can compromise data integrity. **Recommendations** For Google Chrome versions prior to 80.0.3987.87, update to version 80.0.3987.87 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable domains to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Oracle Demantra Demand Management versions 12.2.4 through 12.2.5.1 **Description** The issue is related to insufficient access control in the Security component of Oracle Demantra Demand Management, allowing a remote attacker to gain unauthorized access to protected information via the HTTP protocol. Successful attacks may require human interaction and can significantly impact additional products, resulting in unauthorized update, insert, or delete access to some accessible data. **Recommendations** For versions 12.2.4 through 12.2.5.1, consider restricting access to the Security component until a patch is available. As a temporary workaround, limit network access via HTTP to minimize the risk of exploitation. Avoid using the affected Oracle Demantra Demand Management product until the issue is resolved.