PatchTheCVEmercury vulnerabilities and fixes
Recent CVEs affecting mercury, with upgrade or downgrade steps. 1 tracked.
mercury has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-03-27. Highest priority: CVE-2020-10990 (score 56/100).
- CVE-2020-10990 CRITICAL 9.8 UPGRADE An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleX
FAQ
How do I fix mercury vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mercury being exploited right now?
None of the tracked mercury CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mercury CVE should I patch first?
CVE-2020-10990 currently ranks highest (56/100): An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleX.