Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An XXE issue exists in Accenture Mercury before 1.12.28 because of the platformlambda/core/serializers/SimpleXmlParser.java component.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Accenture Mercury 代码问题漏洞
Vulnerability Description
Accenture Mercury是一套微服务快速开发平台。 Accenture Mercury 1.12.28之前版本中的platformlambda/core/serializers/SimpleXmlParser.java组件存在代码问题漏洞，该漏洞源于组件没有正确处理XML外部实体。远程攻击者可借助特制HTTP请求利用该漏洞获取敏感信息或导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A