{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:fbd9affa-a24a-5243-8751-27469e7b52e6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6",
      "type": "library",
      "group": "org.apache.cxf.karaf",
      "name": "apache-cxf",
      "version": "3.5.11-tuxcare.6",
      "purl": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9757d03a-b664-5dbe-a580-d61316e2bf48",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a7715dd-b184-5477-a93e-b6ccc2215dbc",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c0a39a66-5484-5b21-ba2f-8e8180a237e7",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a595b8b-2b99-520e-8ece-4fb3aca53743",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d532b541-2cc6-5782-a6c1-b128cacfe318",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f63e331a-08ce-52e4-9979-92ca4042a247",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2251cff0-b1a2-5584-9c8b-7bd9724e1ef6",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:593cf2c1-4387-5705-b091-3bfae9ed2bd5",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c32c9951-56b4-581f-9d38-bfac31d28c3f",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:821975f2-0f3b-5e65-b0f1-b6c47e80d815",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:334e9bf3-5899-59dc-90eb-fc65e38815f5",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2565af25-4aa1-5b0e-a21b-7434f6d1ee36",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:982648d6-39ee-5e0e-b5d4-11ee2e348db7",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:017d3cf1-debd-56b2-bec5-d514279516f0",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e2ed874-11af-5757-a809-954c3f38ad2f",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:741f574b-73d3-5ba5-9ef3-eb502b19582c",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f796e34-523e-5d28-9d44-7d9a773860ac",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d4a7ac-84ac-502e-8412-486a30b98f86",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0b3e7d9-c6a3-5f9b-b594-8938070b023d",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5e506e2-7e31-5f83-a8bd-20f83f73e9e3",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:22fe8d99-7e5a-586b-ad87-11bff4259d4f",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d668038-3347-538f-bef0-091995ea2ea1",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88e7f43c-3552-5b29-8511-3444588c8820",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75804951-2d20-58b3-bd00-75839cd6186b",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e3546e1-91a2-5612-82bc-c99c8c05f764",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d49727b4-8fdd-5e7e-bbff-8cdd04cae7e4",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.karaf:apache-cxf 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:364b86da-2dce-598f-acb4-432f41d7d778",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f31e53cf-be62-51e6-bdfb-ee546d9a1179",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf.karaf:apache-cxf 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:515f42ee-7f1c-529f-bf48-8fb7a90c8244",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a6dd9b7-5235-5aad-bb2b-a8502bd612db",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.karaf:apache-cxf 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf552ef0-4827-5058-a700-90a4c8f42758",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdd5cf91-d400-53fd-9ba0-411938644ee2",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:apache-cxf."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.karaf/apache-cxf@3.5.11-tuxcare.6"
    }
  ]
}