{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:809084bd-0d58-5a00-9747-7a63752b9199",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2",
      "type": "library",
      "group": "org.apache.cxf.karaf",
      "name": "karaf-parent",
      "version": "3.5.9-tuxcare.2",
      "purl": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:9ac48d34-b697-5361-9550-25138471f02c",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93a8be9f-2bc5-5121-9bf7-9066c2943339",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e3a1307-d6b6-5629-9490-e0c0509b797f",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:efc68b42-c0bf-557b-876c-f412a2b4b596",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:200c8eb3-91f8-5c59-99d1-6a8e7e48cbe3",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1900a159-83e6-55f3-bd0c-ff4873c09d1a",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96b8c6b6-b789-5232-82ca-c3472a1c5145",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3442609b-4313-5da9-9dfa-9ba2d2bd75ce",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86e628fe-27ae-5e68-96e0-2d5e550275c0",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8dc624e2-a521-5522-a16f-a29251dd5178",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8db354a3-bf95-5c8d-abea-970a5b449f28",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f556aaa7-37d9-54df-83e4-caf30d84869c",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bb547fd-1f37-5ef3-8b6b-dbb9e66c25de",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8ff3ab19-4177-5365-8b4c-267ad12e68bc",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85f5f5e9-d347-5f59-b555-e3a895fbdff5",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54d827ce-fd10-565a-aca5-92f248ff2b92",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edfedf85-8457-5129-8a2b-ab8a04b04ee2",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2014-0119 is a false positive for org.apache.cxf.karaf:karaf-parent 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757b1c23-e8ae-5bb1-ae30-7722beff91fb",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29cf48ff-e431-5607-bb9f-cf7a6fc7b1b3",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:131eb8b3-d22f-58fb-85dc-21c891ec8af2",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:049e60f0-a852-54b2-875a-d0522076d556",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10ca1f85-de2a-53e4-9acd-67585c592d8f",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6c5d43ba-0b27-556a-9c1b-286c644ebbf4",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a7c1cbb-4ab8-5e54-9d2c-de9001c7875c",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c731b75c-965d-58f5-a27d-1853d901f7da",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:973a6f18-7729-536f-b601-89633f2d7d7e",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.karaf:karaf-parent 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33088420-e6e4-5401-92de-e9436dbb498b",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a00f232f-41b8-560b-920b-ce083a800c6a",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22932 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbe757da-21cc-5cff-9fb7-faea22aa944e",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b13f5c66-150b-5616-8e9a-2383972294c9",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.karaf:karaf-parent 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9cb479d4-dd5b-5760-844a-1e9a350c381e",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-23184 is fixed in version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25f02364-8f0e-568f-a599-27be74cdfd24",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd2ad95b-3ad5-57bc-82e6-dbf27cd62ed5",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48795 affects version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:631518fd-d2bc-57ba-a082-76a75574cc4f",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.9-tuxcare.2 of org.apache.cxf.karaf:karaf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.karaf/karaf-parent@3.5.9-tuxcare.2"
    }
  ]
}