{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:23e49d2a-e98f-5668-95c0-054ebb0649d8",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-core",
      "version": "3.5.9.tuxcare.1",
      "purl": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a84625f2-b8e1-51b6-8aae-5759a6debabe",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d166bf6f-f6af-5248-a49f-cc2b9e5a4fe7",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6bb0a26-01ba-560f-9aa3-d5ee8f230ed1",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7a83fee-bc30-51c6-8d74-2ad46e78d03f",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63306457-5437-5399-ac1e-3ae4670ac6b4",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a28592a-ba57-565b-b64e-9fdbbc560d96",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12532bbc-3380-55dc-b604-3b97c4556832",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0be0a638-3ce6-55e0-acc9-b0722c23b208",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d58741da-efb0-577e-83f2-451d25fbc93d",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f4ac388c-0b15-5f48-9432-647af1c6f120",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3bcb6934-ef66-5d47-88e8-412fd1cc01b4",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a75b49f-5f47-51e8-85cf-c906b3f6122c",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fea9d068-b892-5dd6-86c1-33cbdb0fb671",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a474d0cd-c65c-5cd4-945a-53410240477d",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caeb8d51-5910-595a-9111-d2adae53453e",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fcb43bc4-4eba-5c08-a0b5-f4670d56f2bc",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8357f990-2d2b-577e-9dfb-64fc0379cad5",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2014-0119 is a false positive for org.apache.cxf:cxf-core 3.5.9.tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c053189a-b8d1-5ec1-93fe-171db95354c9",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:641ea144-040e-56fc-bbe4-847f0ee18417",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a1e3fc98-0c83-5565-a169-3f931ba57e73",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a610edf4-6293-5cba-9542-e7ce6b6c0d85",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:026a240b-c7b6-5284-a40a-33ab2795a35e",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c226ce8-e1d7-5918-a871-0220a1182c2a",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf30425c-ebfc-5147-9ef4-f789e404109c",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cce62449-36da-5d7a-8eb1-888cf7e96d0f",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c7fd8da-3895-5b1e-8fbe-951e0ba15bfd",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-core 3.5.9.tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:15e30aa4-196b-5c08-b82e-6b7b630fe1a1",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2e919579-678f-5f78-b1e8-dd5d4d2d14ac",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22932 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97867274-614e-5759-9abe-f8eac1e30cc0",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c6d18295-53cf-59bf-83b1-8d41e670afd6",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-core 3.5.9.tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c38c14fb-80f5-5b7a-b79c-4d2e8a97e84d",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-23184 is fixed in version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bf35f84c-633d-59e6-86c4-4ef52dc10b69",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:852becfa-d0ab-507d-a7bd-0d3dc3cc4ffa",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48795 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef56b414-a9cc-5f7c-98de-0ab650bf2074",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48913 affects version 3.5.9.tuxcare.1 of org.apache.cxf:cxf-core."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-core@3.5.9.tuxcare.1"
    }
  ]
}