{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:1385e588-2539-5eba-a0de-07e7600098f5",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-testutils",
      "version": "3.5.11-tuxcare.3",
      "purl": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b852b4c4-b55c-5941-9e47-5a530865e0ba",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ba2c3e0-7868-5cbc-8bf0-191c97c9e1ab",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5679e326-92ec-5e02-861e-6f274f189e55",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c3f36832-4d9c-5790-89ea-28aa7f087587",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f18f643e-328d-554e-8be6-cdf7656ab0b1",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:675aa991-42e4-5187-b8e4-28bb589d0c06",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d1f8bb6-f023-5ea4-9776-62e4914c36bd",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d0d8ea8a-e3f2-53f4-aba1-a3e1d1fb6bad",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18e0b30c-8fd7-5f8e-a21a-6a11661b0b31",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9a8002b9-85ca-5569-bb3a-19aca3cfdb2d",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c409307c-67e4-54dc-a646-d082d5b0ce9b",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63e70743-e544-5413-a69d-74f5779e5d0d",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d4f6b21b-0aee-50f5-bbcb-4df039772028",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a648b5b-2c75-57e9-8558-ceab2868e39b",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10e3b885-d85e-52e6-9fbd-fd7e295ca682",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:288c947f-88a7-59ca-83be-bedf854a8334",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f0e902e-84a8-5c1b-bfc3-aa56b4fcfaf4",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:18bb7f4d-578e-542a-9a9e-8e6da7903c6c",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7633b8f4-53dc-5ee9-9933-d4b8eabe99fa",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:817fec85-9d9b-5c38-8238-977101b29ccb",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb772e6e-5ede-5f5b-8549-de2e129e5f97",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4d1f7a5f-99fe-5127-b63e-ae7662d3ef71",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2d201f03-c106-5c05-8518-e819d190c5df",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42fd0d3c-ce09-5caa-a60e-b47ff8c72786",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a5145a01-a10d-5e68-baf8-e439814aa9b7",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9736b257-14ab-5809-b2eb-f73b0ee91deb",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-testutils 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ecb973b-d207-53fa-9975-79db273fbf28",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86c9bdcb-452f-5b1f-be23-53e2bc4d7188",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-testutils 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64c2e040-4cd8-56a1-b3d9-0c3883639fcc",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:88fe7e94-e8d4-536a-8d1c-c56f657a1a23",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-testutils 3.5.11-tuxcare.3."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:161c269d-5599-5032-9d4e-3fd9462b2ded",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef99ba34-ac41-5757-a949-3a892c7fc916",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.3 of org.apache.cxf:cxf-testutils."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-testutils@3.5.11-tuxcare.3"
    }
  ]
}