{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:ee6ba107-397e-5809-add4-8d473068bad7",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-tools-java2ws",
      "version": "3.5.11-tuxcare.5",
      "purl": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c5dc174d-e05e-5d85-af5c-26f6418c5acb",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eecd92ee-2076-53ff-aeee-b4fa3f3f48ae",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f59ff077-5392-5575-bba2-160845e9bcbd",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ef16d33d-f73e-506c-aa74-8de09f82baa8",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0f255d9c-74ab-5964-9f91-48824ffa3dbd",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:14f62ae3-c39d-547f-9c6b-8b894cc5152a",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59b1d81a-0b49-506e-9099-87f69e4602dd",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:98fa2676-f4dd-548f-bd58-dd0379d4afec",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:273124a9-6476-5e45-a47a-c5922553505d",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:63cc54e7-b4b5-51b2-a88f-56b6e22a0367",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:545cbb9a-e24e-5e12-83a8-7f45496e53d2",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0b67769-e60e-566a-9c88-1c19f2ff307b",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54f5887e-7828-5da8-bb10-7560b651430c",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9f539dc0-78ad-5277-8345-83bd97e7b7af",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e61ee65e-e6a3-5326-92eb-a6d84b368eba",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:43e546bf-9357-585f-bf19-45f8458521f1",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:749560ba-f5b7-50b0-80e1-90902fa21d04",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:236c3e4a-d0da-5484-98b5-16fc923e61c9",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:11efee51-6b5a-51f9-8296-870dbbfa6644",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ba0795c4-5dcb-510b-88e6-0a0eb7ef802e",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53f77349-01d3-554e-bde0-b0a30e0bb067",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ee229001-073f-5941-86db-f4c6b1017737",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1c2a4516-7b4f-5c7b-930f-c76614df0923",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2814cb9-7ff7-5a48-9099-46faa0b6d182",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6208a4d0-bc74-5ff1-960a-173de6fb2875",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e8b28e6-0d2e-5d9e-8695-f537db696ffb",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-tools-java2ws 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37fcdc5a-aaf8-5cb8-a015-01d1fdcfe25a",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:94d00048-dd13-50cc-bb94-8d867b1d4593",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-tools-java2ws 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7490e504-4e6f-56d7-9cda-7e4840722adf",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fed534b5-853b-5708-a785-eb4d23d2d2ae",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-tools-java2ws 3.5.11-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0eab9726-6894-5703-a411-ff1659b9ec5f",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fbe29e40-7b6d-59b8-9833-6de0a741cf78",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.5 of org.apache.cxf:cxf-tools-java2ws."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-tools-java2ws@3.5.11-tuxcare.5"
    }
  ]
}