{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:9672930b-d026-5c8b-8f34-8b040f00851f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1", "type": "library", "group": "org.springframework", "name": "spring-jms", "version": "4.0.0.RELEASE-tuxcare.1", "purl": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:1800bd68-bc30-5714-bd2a-375ad7d6360c", "id": "CVE-2014-0054", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-0054 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a39740f-a691-587f-93f5-1bc7482938ab", "id": "CVE-2014-0225", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-0225 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:3c5d6bb0-358d-5e48-97c7-62b5be0d65be", "id": "CVE-2014-1904", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-1904 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aea45990-f222-59da-8465-462e1aa8a661", "id": "CVE-2014-3578", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-3578 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ef8d474d-ae6e-5558-8ac2-7941f4a4bbed", "id": "CVE-2014-3625", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2014-3625 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:91d3c2bf-c911-5c73-8c9c-61696280e54d", "id": "CVE-2015-3192", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3192 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:180714f7-e877-51f4-a00f-f7b920ef9ae0", "id": "CVE-2015-5211", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2015-5211 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ace1016-720f-5972-8e6e-ed883e6cd6cf", "id": "CVE-2016-1000027", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-1000027 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4a7146f4-c616-5848-9e95-18cf2df18234", "id": "CVE-2016-5007", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-5007 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:f9a15dab-8129-578d-ac30-94c37a665857", "id": "CVE-2016-9878", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2016-9878 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:9bcfa629-fd5c-5132-95f9-603474195b9c", "id": "CVE-2018-11039", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-11039 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a94c3149-ede8-5cb6-a7ce-0912e5b69368", "id": "CVE-2018-11040", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11040 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:4e8ac4a9-ff8d-5d61-b9dc-8db67403207c", "id": "CVE-2018-1257", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2018-1257 is a false positive for org.springframework:spring-jms 4.0.0.RELEASE-tuxcare.1." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:92aebf4d-cbd3-5c09-b54d-bf1777c6f72f", "id": "CVE-2018-1270", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1270 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:cc34a40a-c605-55d5-b926-551d261a4185", "id": "CVE-2018-1271", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1271 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2f0b05ad-cf5b-5527-afc3-9e41e72438db", "id": "CVE-2018-1272", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2018-1272 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:fc157d50-e022-5669-911b-1e4399e05fbd", "id": "CVE-2018-1275", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1275 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:b3c3f76a-6835-532c-9f7f-5be028c93396", "id": "CVE-2020-5421", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-5421 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:8e4afe76-e5c2-5285-ba8d-720582c4cb3e", "id": "CVE-2021-22060", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22060 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ae6cdf43-b616-568a-883e-6c376ab3748c", "id": "CVE-2021-22096", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22096 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:e4ecd1de-0ee2-5f7e-8c2d-ac11e25e4e5d", "id": "CVE-2021-22118", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22118 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:001027c4-7fa1-559e-89f4-e2b45bbaf4f2", "id": "CVE-2022-22950", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22950 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:94bc467f-1920-5fe1-b734-3477f262748e", "id": "CVE-2022-22965", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22965 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:27cc843a-6457-5623-b6b5-8271f0a9bcfe", "id": "CVE-2022-22968", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22968 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:0d9b9be4-f4f9-5ea1-aa9b-64c59e7f9396", "id": "CVE-2022-22970", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2022-22970 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a1a3e52f-fba9-58b1-8992-d17b9e382c7c", "id": "CVE-2022-22971", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-22971 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1b55a6aa-2ce1-5904-af77-9046208838b0", "id": "CVE-2023-20861", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20861 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6840708c-f466-5904-b7c1-aabefffbcfa5", "id": "CVE-2023-20863", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-20863 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:67457f4e-62d6-51bd-9f08-24e5d0ac3be5", "id": "CVE-2024-22243", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22243 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6ed091dd-d164-52d5-97cb-9e62960c21d5", "id": "CVE-2024-22259", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22259 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:c95a268e-b233-5b31-9e02-e681777ac336", "id": "CVE-2024-22262", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-22262 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:a972d0a8-04ff-54b2-88f4-c8e942a7f9a0", "id": "CVE-2024-38808", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38808 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:2faa5653-a6a9-51f3-914f-3d1ab97125fb", "id": "CVE-2024-38809", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38809 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:db4dd471-ada1-5500-b4b9-3a2951d14fa0", "id": "CVE-2024-38819", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38819 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:6248c699-a3f7-56ee-94b5-9dc1a64d1b40", "id": "CVE-2024-38820", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38820 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:bd49dd16-a787-5340-bfa3-0f9009d4affd", "id": "CVE-2024-38828", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-38828 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:72c9f3bd-53b4-575c-b1f2-70c56e03e255", "id": "CVE-2025-22233", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-22233 is fixed in version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:1de0e4ba-22a0-53b8-a4ae-126df56948d6", "id": "CVE-2025-41242", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41242 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:ad259e59-8ae6-5b62-b98e-3841e9231f2f", "id": "CVE-2025-41249", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41249 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }, { "bom-ref": "urn:uuid:aa5b2688-e647-5a5f-8a31-4bef5fa9de90", "id": "CVE-2025-41254", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-41254 affects version 4.0.0.RELEASE-tuxcare.1 of org.springframework:spring-jms." }, "affects": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.springframework/spring-jms@4.0.0.RELEASE-tuxcare.1" } ] }