{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d0a4aab0-2efa-57b9-957b-4d94701aad2d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-rt-management",
      "version": "3.5.11-tuxcare.6",
      "purl": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:6b9c7644-9b21-5dc5-86b8-8252db2d340b",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8210d584-5909-5a06-a6f9-82cbf93ee913",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a0a4814c-0c45-59ab-905f-8b8d3221577d",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:677edb90-fd78-5f12-824d-6809f9c1a607",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:467dc900-6afe-5487-acb7-5129208b9c76",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a1a46ca-1b19-5f58-9be3-26f3392c3ce4",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5435f54a-b1a4-5b80-9c01-3b055dbcbf2c",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bd6cc97-af9e-574c-80b9-f80318875b77",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:982dcf6d-fd4b-52db-94c0-f8545a168da6",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:83ed5867-0b63-5211-b88b-eb47deb0c35f",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2156eb85-6550-5931-8711-d1015d6b23b3",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0469d42f-193b-5a80-a88d-a45fb7937e7d",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f00c4daf-f37e-5d8e-9be9-e23ccf3d56f9",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f561049-e87c-5971-baf0-4d21eb587863",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a379240-2558-5fe5-83ce-e70603a350e6",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:224a98ef-9d1d-59b9-9900-a71fee34409b",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f588efb-a4c3-52c7-ae28-95bf134eb05f",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8c7ce1bc-f790-5994-b671-12b55d13a8b6",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b65db52d-3f18-560f-9c41-ca7612b9b373",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:be183884-5e12-5ad0-8f12-fb86e39d1c8e",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c361b1a7-8c5b-5c21-90e6-914c31dce4f3",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2ee41f4-c9f7-5d92-bbcc-d27a3b2350c5",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d96e9df1-1444-587d-be7f-4379a6a9cd04",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:428d393c-d154-579e-9fbb-ec0753b1868e",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fb16308f-f476-5f29-9a39-7109c66760de",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8be0d28-74b7-5266-ac02-e3f2941f2558",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e94913f-d8ca-59c3-bb47-4ae021383b8f",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d6e941d5-d4fd-5353-ad45-1cd6d535f1b8",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9266e366-aa52-547e-8496-f2d7a53b3704",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6e849a69-c348-56ab-857c-48cf39115308",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.6."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c7938e9-e2cf-587e-b3e1-74a040816939",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:553dd3c5-0298-50f4-a0e4-db6e57c90509",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.6 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.6"
    }
  ]
}