{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:cd668130-1d93-5276-8a88-9087ce16807b",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1",
      "type": "library",
      "group": "org.apache.hadoop",
      "name": "hadoop-hdfs",
      "version": "2.7.1.tuxcare.1",
      "purl": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:b7347a34-cd12-5a3f-9315-dcf4f1a243e1",
      "id": "CVE-2016-3086",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3086 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:80396d87-3497-53f6-adea-1102bf9aab0e",
      "id": "CVE-2016-5001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5001 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a7b20333-f2b6-56f7-9265-57a58e1b16c5",
      "id": "CVE-2016-5393",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-5393 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c37df78d-6ff8-5ef5-9d83-f8728a4ce2e0",
      "id": "CVE-2016-6811",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6811 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f5a7a06-652e-587a-aa39-2499335047f6",
      "id": "CVE-2017-15713",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15713 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c73dd38-2bba-5e56-b4c2-f616d641dd64",
      "id": "CVE-2017-15718",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-15718 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a562e00-32c2-5f71-9d67-83233244f511",
      "id": "CVE-2017-3166",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-3166 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4b7e7723-0897-5c6b-a009-6654660f493c",
      "id": "CVE-2017-7669",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2017-7669 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d3795426-fc1b-566f-9dd3-9e3de5215509",
      "id": "CVE-2018-11765",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11765 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:31a87601-71bb-586d-988c-9b92d03caf4a",
      "id": "CVE-2018-11766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11766 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac69c0cb-0f1e-5b22-b023-1355b04164f2",
      "id": "CVE-2018-11768",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11768 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6ae49443-7bf5-55bb-9c0d-30f6b7ac1be3",
      "id": "CVE-2018-1296",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-1296 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37b9c1dc-be89-529a-a6ba-6cbc3e2bf84c",
      "id": "CVE-2018-8009",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8009 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d98aeae8-524e-598c-8d3c-1c0bea1bf024",
      "id": "CVE-2018-8029",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-8029 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5612af23-f025-5be8-ba41-2a860daa6a96",
      "id": "CVE-2020-9492",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-9492 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e69ff2e2-dd4b-5f78-b0df-13a9c3232bee",
      "id": "CVE-2021-25642",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-25642 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:677630d9-2ef1-5e07-838b-75ddd13ec620",
      "id": "CVE-2021-33036",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-33036 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bc6f8d2c-fe3d-5446-b17b-9253a6923972",
      "id": "CVE-2021-37404",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-37404 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4f74527e-bfa2-5eea-9658-31eb6625619f",
      "id": "CVE-2022-25168",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-25168 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a39bf016-eb96-5b3a-bbf4-6e80a3176cf4",
      "id": "CVE-2022-26612",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-26612 affects version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2589ac54-e0e6-50c2-afb2-56d66240aa27",
      "id": "CVE-2024-23454",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23454 is fixed in version 2.7.1.tuxcare.1 of org.apache.hadoop:hadoop-hdfs."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.hadoop/hadoop-hdfs@2.7.1.tuxcare.1"
    }
  ]
}