{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:d071a3e8-06c8-5eb9-8200-48d1111b2acb",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7",
      "type": "library",
      "group": "org.apache.cxf",
      "name": "cxf-rt-management",
      "version": "3.5.11-tuxcare.7",
      "purl": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:d120b285-82e4-5318-a4bf-cc750eeb4190",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b2a56362-f1d6-5575-846b-5a202e5fffa6",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5c316570-50f6-5329-bc0a-9bb5e93417f6",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:643a95d0-1ae7-5fe3-8198-62ba983ade9c",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0fa1520f-cce2-5e95-b8d8-efdb91ccfe51",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc1b09c-3de8-5fff-9fef-790494c434ef",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4fd1f4b-8e0d-5953-a689-1ba9b47e7236",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a6b3f2f8-1fbf-5cf8-ad81-d0a5fb4effa7",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:45441db0-2dcf-5de8-9ea7-10d23e9f8d87",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c086d37d-dddf-5f96-974a-fda19c6ae707",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2c964875-944f-58c4-a39c-eaa972e3d78d",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:056d1314-8203-5a9c-b670-3689d2c1080c",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:841d4d35-deae-542c-93fc-1f40585cb21d",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:998e6b26-d5c6-5134-b569-28d2c04ab4a6",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c01e982d-e8c6-5fd7-b102-9b37b5f524bc",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:54b1868e-51d7-550f-b748-342ef20449d0",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a88b0a3-ad00-5179-98d5-f87a0d465d4b",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0119 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:acd81a9c-d092-5443-a9e7-cbe0edaa924b",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3c444f4-3757-5242-bbbe-e09189e2f75a",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8099a8ca-f6d9-5923-9dbc-040ba79deb44",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6be2c301-9ba7-5e49-9f03-1e385e1b09fc",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10288cbb-eacd-5539-a468-64cd1da79e39",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:77ca108f-7867-5198-aad4-1678be5c4158",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08bef3d3-15f6-5983-bc57-33afc8390ce7",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8eff5f76-0ba3-5b77-98ef-d89c7e732cc4",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d2e9a3b-c7ac-57f9-98b0-c4dffc8d9cf6",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:084ab4ee-7447-5563-aa72-51553b612f75",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:486f687d-9cfe-56bf-bc1d-921f2c0c8700",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-22932 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7b044df9-7295-545c-8c43-6cbea44b4c2c",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5ee3a19f-84f1-546d-8a49-1654967dfaa8",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf:cxf-rt-management 3.5.11-tuxcare.7."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:503c9d6d-8df7-5559-b544-2db35e34768a",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:29da7dfa-f478-513c-a6ca-24494b87d9d0",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.11-tuxcare.7 of org.apache.cxf:cxf-rt-management."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf/cxf-rt-management@3.5.11-tuxcare.7"
    }
  ]
}