{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4cc0fc5b-e0d1-52e5-ac0b-d9cfa63ebc2a",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3",
      "type": "library",
      "group": "org.apache.cxf.karaf",
      "name": "cxf-karaf-commands",
      "version": "3.5.11-tuxcare.3",
      "purl": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:20c21080-e130-59a0-a960-ba6c8ba7be06",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b82f2bc1-dcad-54c6-ba9e-24943084bf57",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ff5f5865-f0f8-5818-bb77-b8e4d66a1876",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59644772-9d96-5c48-8a34-be49be65ffcd",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b5590fa-a448-5c42-a807-db31f6088f08",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4c539ed9-61e2-5aca-a90c-c3ad9672567d",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bfb3adc-90a1-508d-8511-a189df43281c",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59931687-ce2a-5039-9fec-71fa6bcd455c",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fa203c5-e208-50f5-8423-cb5154d7dfba",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a993080-8925-55ea-9abe-f07fe352aee8",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc2e5cc2-9114-58dd-99e2-e2c19f11e61e",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:35e0d939-7c25-58b2-955b-20c62c117682",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e78af57e-a0d7-5c3d-8a2f-84ed6ee506b0",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:66d06650-8120-53ab-be68-cd0db0e3f09f",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:729fff31-e2e0-5f6d-953f-f883d6723e12",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69aadc69-e3db-5618-90c4-f3c37278965c",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e7efd66-3baf-5927-afb0-c515dd4b633c",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53e7b214-ced1-52fe-920e-6d5bcaff7a39",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:542dd84a-fda6-57f9-93bc-2bc92c91fb73",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d8bcca1-92a8-5267-8bf2-854726b59c33",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a927c10b-8ed7-5c4e-b07f-df912d8831fb",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaabed52-c47a-5822-9754-057cfc137b69",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:409cb118-08ac-54dc-b598-fed6e5bfa581",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14d944c6-8ab1-5bb0-bb89-1f1b05271906",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85c4d657-4165-5ad1-9214-1d5809680a94",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e22106f-0496-5a80-8187-9c5d9632775d",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddd2a548-9184-5de7-a61e-c40636e49617",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd2955b5-7365-515a-99a6-ab17115e196b",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:159bb680-9140-56a9-830c-a85d642d4e11",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:39b20903-97b3-539d-8db3-db96b518c82b",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:decf51bf-b838-5658-bd8a-702175dc5ccd",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e719796-21f1-5fe3-9d49-15e54c740d70",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.3 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.3"
    }
  ]
}