{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d810d3df-ae82-52e8-a7a3-d3e2dada8938",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-tools-javato",
      "version": "3.5.11-tuxcare.7",
      "purl": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d1b55620-7a39-5f78-b3c1-5bde751cabb9",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb88e87f-5481-5a1d-a82f-46c57fd5cf1f",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9856f60a-43e1-5bfe-b4f5-b6c07f656a28",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:68cf2889-25e6-55a5-b45a-fc24304c98b4",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b6eb9a75-44b6-5bcc-9529-1e78b9b48adc",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1540182c-cf60-573d-99a4-0ff220e8f9ea",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0ce1ee71-862d-5199-bb37-1af4d1a2d78b",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb216e5f-d0b8-56ed-88eb-d7fa11a08cec",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8f6dec92-49cd-5a58-b1c4-6a061c4d1016",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5e4de135-087f-587a-b00d-fc2d0161e4ac",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b0983d02-db1d-55fd-9bd7-497360652585",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f01596e8-202a-55c8-a85d-8695ffc9b1d0",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7f97571e-5a4e-5678-a170-3da341a9525d",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c40d5c6d-8d93-5a5f-a5e3-725e64b7173a",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:21696e93-0a7d-5b57-9f96-64aeaf3a04a9",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8a31735b-3455-5ba4-9525-9beb30e7dbfd",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:69821bd9-e7d3-5c7f-a926-aba4cc78c07a",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b32d963c-a3cb-57ff-9e12-9ed8a5fb6552",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a98c099-cbcf-5306-8170-9b75e3351a1f",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f6ba47f7-019c-5113-b454-de68717b559c",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2efab561-0d25-5f3c-b13d-f6ac9cfb8f76",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2bd17f88-3e7d-5b80-b3e5-ce30ff387426",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ac761131-c974-5a80-92ca-d46fa3fec9af",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5a9e3830-b600-5ab9-957a-3d810310d6f3",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1ea3086c-7b4c-5647-8f74-bb1c7934d904",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:53bebda4-4ec2-5b9f-9228-17ee1b2b5439",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-tools-javato 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ead41101-483b-5644-9239-1998a2728c06",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:717eb7ee-e08f-555a-b723-8d9e0f0ad186",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-tools-javato 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:563e24b5-e56b-5bd7-b6c1-79bead2957a6",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2ab0d986-1f9f-5821-9c0d-f3e4527c49c2",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-tools-javato 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:28c50943-d570-5805-be1a-78142f7f770c",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c62b2941-515a-5849-93d0-08c9d7f029ee",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-tools-javato."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-tools-javato@3.5.11-tuxcare.7"
    }
  ]
}