{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5c0a4991-0e93-5f2e-aaa1-a4b6a2f43af4",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-parent",
      "version": "3.5.11-tuxcare.3",
      "purl": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c793eced-c891-575f-ae1b-82a9fe3e010f",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:929dc7bf-0069-59f0-a8d4-527053661a48",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7bf29c68-36d1-5204-893e-a4b0c3999eae",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f075a09-d7f7-5ad6-a8e7-72eb16f00aa5",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3ecebe30-6a57-574e-9c76-673a54a28bb2",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31e5c06c-120a-568d-a77e-338d7a36f6b1",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a42799d-81b4-5077-977b-c22723b5d88f",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fe50f50-2376-5be9-9e09-7286e150dbf8",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e639d14-e99d-524c-8ea0-c255e09d73da",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f600e815-9695-5b0b-be1b-328f76702f9c",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:65dbc211-5377-58b6-a339-a831ca2fd277",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a834e3f-17cd-5ed7-9b13-bb398fd194f6",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae422aa8-9f34-5283-99de-9cd53f91e272",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0d9bd14-cc96-5f0c-802c-8e73726815bb",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:46c7e88a-9c73-542e-807c-137e0a3b4fb5",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5f91321-5a79-5af2-9e32-c0f1801de94b",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0291479e-3bb4-5e74-9ac2-8ee71a076112",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:71c30a8e-8a21-5a7a-b6a5-a3b927c9f753",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d509507-52b7-51cd-8d49-cd2f1ccc4434",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25f3b1d0-0d18-534a-9577-67d02ec18d31",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eaf7aa92-ea4d-5d0c-b1b7-df292c14e054",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:126e3840-f5b6-5206-9ced-42f9fc687ff4",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:befabd3b-c5e5-5e07-8d26-5fd10d5e59ac",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9126c5d3-81c6-5701-90cd-bd0fcd5731bd",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b076eef8-a8bd-5a5d-b988-e1e49947d17b",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43fc3653-019b-5606-8e48-8e65a81b6525",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-parent 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e9f660c-985b-5702-8b47-e5ba8f2c2ecb",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd916b78-e359-5dd2-b49b-05377acb7060",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-parent 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:974cb3a7-66ca-516f-be35-2a365b8c0f6d",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec3b8d7f-1ae2-5fb2-88f9-4c0da0f82d61",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-parent 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f9fd016-56b3-5530-a359-5b899ecf7785",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a908a2c-9581-5185-b564-629b4ab81283",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-parent@3.5.11-tuxcare.3"
    }
  ]
}