{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:71af652a-7bc9-526b-a835-f1106fc542ad",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-rt-javascript",
      "version": "3.5.11-tuxcare.5",
      "purl": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:3c3773d9-bae4-56c8-be41-03022a980777",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:76eddb0e-9011-5f29-9f61-cecca13ea843",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0c09a495-3af0-5940-906b-c7ed1ac08fca",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f046b563-8d8c-5946-bce2-06a1407ab81f",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd3bb16d-63c4-5a20-aba6-1b2cf661cb05",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c1bb7738-e837-598d-9464-680ece6e96f0",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a274ff5a-22a4-5f6b-ad29-22c2e4169b7a",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2808299-ed4d-5bda-bfe9-d2c8708e9778",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ec735a57-4b95-56f9-b582-734a2e4703dd",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df8d3197-9c2e-547f-93c8-103e9e1d6510",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:58a23b2e-212c-50b5-9a60-951c5f6a5aee",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ea740a3c-8356-5d6d-9455-188377b2b402",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:abf273d8-4436-50b1-858b-d3b9dcf1da90",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42b3412e-b69f-5bb1-bc63-bfa47cf72972",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a0763ac-f1d4-5285-8a93-7252d137bf47",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:16227ddd-8f01-5338-a659-ec8e5413269e",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93802916-3abe-5933-9ef5-114dd5946772",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fe17d28-a853-51c7-917f-3573ebd9b6ab",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98a654d9-5f1f-527b-ab40-60bd209e6bdd",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a737e07-d94d-5bc7-ad09-29bd0b94cd7d",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a3a4d5f6-5160-505c-87b1-bedc1e9a786f",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba80338f-301c-5409-9f8c-b460c2eddbb9",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8847d43c-c0a2-5137-9e32-1d08dfb7afa0",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3534fbfa-a243-53e2-aa34-a041b285179b",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a600e7d-f961-5a16-bc01-a549c1be4f86",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:33a0200c-90a9-578f-aacc-e539a36ba41f",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-rt-javascript 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5699b68-943e-5cef-a207-9c35a7f2adf9",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:757263f7-e43c-58aa-9aee-a8f10ab880ee",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-rt-javascript 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5884c05b-be40-5fc9-bd05-dd4615bffc24",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d09f773-95f2-5da8-a8eb-e142294844aa",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-rt-javascript 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:321e5564-5fe1-54e3-b3c3-1eddb8ac97b5",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b084756-ed4a-5d4a-b266-847011ec1eab",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-rt-javascript."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-rt-javascript@3.5.11-tuxcare.5"
    }
  ]
}