{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d7c02138-b23e-5bb0-8835-ad8f34af3e64",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1",
      "type": "library",
      "group": "org.apache.hadoop",
      "name": "hadoop-azure",
      "version": "2.7.1.tuxcare.1",
      "purl": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:81a4ce9f-6c73-5477-9f5f-e372e1ea1aa7",
      "id": "CVE-2016-3086",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3086 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a41fcb99-ec42-59da-a25c-b1078fc33902",
      "id": "CVE-2016-5001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5001 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f47e8a6e-8d6f-5d4b-a503-c9d0f1a4e5db",
      "id": "CVE-2016-5393",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5393 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c91d63a0-f7c4-56d1-8b42-37f6a2d7850d",
      "id": "CVE-2016-6811",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6811 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:75be6544-7181-5769-9322-a299e17d3b92",
      "id": "CVE-2017-15713",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15713 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c997dd8a-8a69-59f5-bbc7-379caa3abd51",
      "id": "CVE-2017-15718",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15718 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:029af610-8b3e-56e9-8c55-8e8af2f9f76b",
      "id": "CVE-2017-3166",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3166 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e64bc762-9edd-5d8f-a40b-66dabe971856",
      "id": "CVE-2017-7669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7669 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ca10bf3-472e-5af3-8264-641873cc3fbd",
      "id": "CVE-2018-11765",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11765 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5237e6e5-0ecc-5a83-bd33-2d1f31add182",
      "id": "CVE-2018-11766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11766 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a334f147-cb9e-5370-8c6e-5d8b10a02926",
      "id": "CVE-2018-11768",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11768 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d611ea1b-fc94-539f-8056-a5b39332142a",
      "id": "CVE-2018-1296",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1296 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a424ad59-c796-5e9c-b802-e148f2e39f16",
      "id": "CVE-2018-8009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8009 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d96fd5e1-1c79-52d2-82d5-66056bc1e29e",
      "id": "CVE-2018-8029",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8029 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:026f92b8-45b3-5251-93de-92f0d2ba2e76",
      "id": "CVE-2020-9492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9492 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ee67b9e-8968-5f8a-b74b-a8c9ce843749",
      "id": "CVE-2021-25642",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-25642 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1a63d63a-2c2b-55f6-bc1d-412f793b31e5",
      "id": "CVE-2021-33036",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-33036 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c15c1bc-1eb6-5140-8d6c-2af90e054e0a",
      "id": "CVE-2021-37404",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37404 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7dc1e52f-48f1-5948-b4d2-51fd56e37588",
      "id": "CVE-2022-25168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25168 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7a720392-8898-5e0a-a367-1edc7e29c03e",
      "id": "CVE-2022-26612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-26612 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c8e5a4a6-a1cd-5de1-ad87-569c10714051",
      "id": "CVE-2024-23454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23454 is fixed in version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-azure."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.hadoop/hadoop-azure@2.7.1.tuxcare.1"
    }
  ]
}