← All advisories

Critical severity9.8NVD Advisory· Published Mar 27, 2020· Updated Jun 17, 2026

CVE-2020-10990

CVE-2020-10990

Description

An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Accenture/mercury2 versions
cpe:2.3:a:accenture:mercury:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:accenture:mercury:*:*:*:*:*:*:*:*range: <1.12.28
- (no CPE)range: <1.12.28
Accenture/Mercurydescription

Patches

Vulnerability mechanics

References

2

github.com/Accenture/mercury/commit/f647a01347485d2afe3a0b735eab3d0121d61f46nvdPatch
github.com/Accenture/mercury/issues/13nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.