{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:e8c9eced-4b8f-5785-91cc-2641309b68a2",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-distribution-javadoc",
      "version": "3.5.11-tuxcare.5",
      "purl": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6ab4fb39-1bb7-5bda-a202-d1581b8e8ef5",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb186106-8594-5cc0-baa9-c5ca50169791",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:12abc0a7-12fd-5e75-adf5-43ec8760dfed",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bac1482f-bc99-5e99-8833-7906539ab8b5",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c978bb22-fd53-589d-93fa-8897c86426ce",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:72f3bb80-c6f7-58b3-aa52-03dec7d67195",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7129df36-09f0-5077-963f-fe062cfe0113",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:30007bae-086c-585c-826e-bc7b6e7842ae",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ed8aa619-a1ed-5703-b503-94dac7184d13",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0e2a8e77-91cc-51e8-b974-5e0d95e2a6ea",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6631054a-2bb3-5f30-870c-079891364cae",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24c5377a-a9df-5a5f-9d21-2be19f35a87c",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:646c43ed-32b7-5222-aeae-c632ad43f735",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9ff98215-a71e-50e2-9868-88d8b2671974",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f79c26f4-2c16-5578-a774-1aec940173df",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d925aac5-ad78-513c-b67b-fe681013b2b4",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53d623d7-3bb0-50ce-8930-fffece84e4d5",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3792eb52-90a7-5316-82c8-ad8ba506925d",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:da200d6d-0879-50ce-8956-1f0f8d42f2fd",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1156659b-1a72-5564-8387-6e1830730aeb",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ab213508-eca9-5a1d-8777-b0aa554cc70e",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:af083c66-1fdd-5bda-958f-375331ec0a2d",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c443575-ffcc-5b2f-b45a-52801fddd45d",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c06ab296-e781-5338-be3b-fa9b47d34502",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2cf05c10-a64b-5596-9968-567c106b312f",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f2a81c9-082a-51a8-917b-7cb6b85655b8",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-distribution-javadoc 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:24825242-7d9f-5f3e-b9aa-333244c19eda",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e462cffa-fc16-52be-af4a-bc51e84c4154",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-distribution-javadoc 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c91461d-20f5-52f5-8c8b-6da67ceabc66",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d0bd364-52c4-5c31-9ee0-637b6784c397",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-distribution-javadoc 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:84bee162-69dd-5735-b57a-d42fce32082e",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42d7ae97-5c83-5e3b-af9b-eff1a82d8f47",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-distribution-javadoc."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-distribution-javadoc@3.5.11-tuxcare.5"
    }
  ]
}