{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:df6b5a2f-7d54-5098-ac41-e2f9f1034ffb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-tools",
      "version": "3.5.9-tuxcare.2",
      "purl": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:394b7fd0-2308-51a4-aa6c-5072825f4c1d",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eabb82bd-6ad5-533d-a68f-5f37c41843e9",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c189a862-de31-5db1-8105-afc9a06fe913",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e96a33c1-bccf-5728-8d84-9732d56ce8ec",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717042d0-ed6c-5bb7-b358-ba0d7b2d1f39",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5928868f-3d9e-5f24-a06f-5237c546d98c",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2fc3eea6-80ad-5900-aa71-709098bcbb2d",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b1e77120-c748-5c76-93c7-17a1b868a689",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d624cafd-9fa7-54eb-b7f0-d77b842ad4e2",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a998da5-47a0-57f3-a0f8-4d491c6fc975",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b23b157b-c93d-5a7c-8719-af917efcd3a1",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adbbbea7-67da-57b4-abd2-5d1f005a94e0",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bdbb3fb5-8ccc-548d-898d-15d644eaaeed",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c58cdfa5-e37f-5463-8aa2-9ef37d9c92e8",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77556b2d-15df-5ecc-9fe7-7112b0da6263",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:56748452-28ce-564b-9b89-1afcc4b60911",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8539ed93-739e-56a6-9b34-1c1be7daf163",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2014-0119 is a false positive for org.apache.cxf:cxf-tools 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08f9a806-b127-5414-abb1-be840c2324a2",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fef193f8-aea0-5553-a4e3-6c67a7e40c87",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:254ef086-59f3-533a-88ef-c02f579503a3",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7be2cf98-0c4b-5c62-ae67-565e8c32848c",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01b39d32-8aa6-5b1a-9b75-dde54225118a",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6bd81d5c-6da1-54df-84cf-5595c514e150",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f07ab5d3-548f-5b15-ab0f-333db422a3d8",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3198b5e8-b7bf-5f04-ac65-75f50d4d211d",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:972fae8e-7579-57ec-90ff-cfe2c72ecf86",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-tools 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:64022016-3e4a-52e2-8c0f-8e0e8e386ada",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4a87dcdd-3a95-5f44-b7e6-0d7e85b388da",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22932 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:23014581-eb3e-5b3c-8bde-91a2a7ae1d9c",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:27544c3a-f3ba-5205-9d37-16cc3215b4b1",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-tools 3.5.9-tuxcare.2."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a3cb588-f35b-5831-9538-4110ffa59867",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-23184 is fixed in version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:961be13a-7ac3-57df-a3ab-1e1d57d2b6a9",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a88cb57-f6d9-582f-83ac-caa6689db2c9",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-48795 affects version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2523554-1be4-5d0e-96f8-e49eb998b042",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.9-tuxcare.2 of org.apache.cxf:cxf-tools."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-tools@3.5.9-tuxcare.2"
    }
  ]
}