{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:44ab0671-b76a-5c32-a49c-9e02654f7d1c",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6",
      "type": "library",
      "group": "org.apache.cxf.karaf",
      "name": "cxf-karaf-commands",
      "version": "3.5.11-tuxcare.6",
      "purl": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:7b7f60a2-c5b4-5d88-9604-d101e18e24c9",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2297bf5-35ff-50be-bef5-2cf826a57252",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4aeaf9cb-8e1b-5e81-9a75-61d73a56aac6",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9811bab2-31fb-572f-94fd-1021012f49ba",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:353543a2-3760-5e83-8c79-6959d89100b2",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:61c6a56b-b11c-5848-beff-8d14dfd7a2cb",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:779da7bd-b3d6-5348-81b7-b181253d1f01",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad56b88b-3116-5ef6-9513-de209290bb9b",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9d7f0288-4ba2-55eb-a227-844aae323c3f",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2460f2f5-68bc-5c38-b477-1f18f9c2c0a5",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4cf4b314-5057-5a96-a969-bbb5317c7641",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:249218f2-7e40-50c4-a26c-b24edff075b3",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f564b37c-ff68-50a0-aeca-aad65a2c2d77",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:436c8d22-658b-5ebe-93cc-a2a790e97c3a",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:989ff782-e994-5b22-8295-d2e97cbbcee1",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2c3cee8-84d6-5de3-9414-db253677b06c",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ce90857a-b97b-55d5-8002-f1de66a5515f",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ed85c1f-3118-5691-af87-06a5b116f982",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e87b5c4f-0f7d-5acd-9b7e-97932d5c0fb0",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:055fd245-ff3a-507a-b441-558cfd237b4d",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0d231e3c-d4f6-534f-8a86-b3f8d48f8203",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a0bbcae-ddaf-59c7-87cd-d49af5eb2865",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac8174df-e813-5ee6-a878-153392b0202d",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4e5c611f-4497-5b43-8b3c-b1c36aa151c6",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8001ce53-393f-5e88-bd9d-14f2a51def85",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:db43abf7-78b5-53d4-a768-1211fea6388a",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9db60a68-94b0-5c0d-adb5-52e254a4d127",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaa9e46d-07eb-5ec3-8940-74c7abee9856",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01bcc96d-ea5d-5373-8227-2267b3cb17ea",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1b9ad4e1-71ea-5ac9-9ec1-e7ee4c5799f6",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.karaf:cxf-karaf-commands 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a36c31de-8e34-5645-b570-56bed449a7e1",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:019df806-da71-5cc4-adb8-cd033894556b",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.6 of org.apache.cxf.karaf:cxf-karaf-commands."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.karaf/cxf-karaf-commands@3.5.11-tuxcare.6"
    }
  ]
}