{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:783e1be2-5f1b-57d6-925b-50dbfa155c47",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-osgi",
      "version": "3.5.11-tuxcare.1",
      "purl": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:2464d550-c211-56be-a432-c03d0cfcf0b6",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:548cb40e-0eae-55ca-90ca-d8e573b0603b",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b53a2ce-5ae7-50dd-930c-3d065c544c9d",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:324ee96b-f243-5445-922f-8dcf0759e5b7",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eaacdd7-d297-5a95-a7a0-a564c64f7037",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a614394-7a45-551b-abbe-5a39e64fd6d3",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:378841e8-a7d2-5990-bdcf-90bf93764626",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93023e17-814a-51f4-9fd5-640267082e5c",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:dc4139ca-97e7-59e6-b235-b0a1d03ae488",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d84f891e-7c94-5352-83b1-4419e7bd6f5e",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7d07259-111b-5870-838a-a30d92df90da",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d01ef55-243e-509f-a95f-93b162e283ac",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1337777f-68b5-5fdf-9f3c-042220ecfeb0",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:47b0f081-20d3-5c93-aac8-72c90c46c7a8",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e0380c1-5f3b-5889-a75b-c21aa9fa33d9",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bcfdc48b-82ca-5a68-83eb-dde91da7dc4f",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bd57d13b-e11d-544b-a4c0-4a3dc8a73172",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:85cdbe41-0e62-5b3c-b735-73593e1d9935",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e0fccf4-4f36-54e3-a111-e3eac11f4d85",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16cb4592-4f9b-5845-8984-03777ef7e448",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53fef7f6-de14-5503-913c-e60dee5650d0",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df361e6f-409d-57cf-8c79-4828ce96bf4f",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:854079d3-1437-5a04-b3ca-593badb47413",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a20fc48-8c68-5448-8755-70a522afb127",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5026ee1b-684f-5690-8549-b0cbe23c5c16",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:62576dbf-9a30-5d40-802d-5b182d7c7a9a",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-osgi 3.5.11-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:57ed00d2-bc58-59cf-b532-778b19b60034",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:02ceb825-9a28-58ab-9f1b-d53fd95c4334",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-osgi 3.5.11-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f3e0942-d1ce-5a3b-98e7-5feb3fc4f851",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef08d152-3749-5c1a-844c-3bbadac89bc5",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-osgi 3.5.11-tuxcare.1."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:873a4259-2577-5a66-aba6-41c21df2b47f",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d82567f-82f2-5155-83a8-3b240dec14ac",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.1 of org.apache.cxf:cxf-osgi."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-osgi@3.5.11-tuxcare.1"
    }
  ]
}