{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7da3ba98-5c5f-5559-86ce-13ecd30c900d",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5",
      "type": "library",
      "group": "org.apache.cxf.services.ws-discovery",
      "name": "cxf-services-ws-discovery-service",
      "version": "3.5.9-tuxcare.5",
      "purl": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:1ae3b88a-e2af-5dfb-aac0-c499e2b00eb4",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2aefce4c-628e-5ce7-b7b3-e6922cc23d4e",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d10437d3-ebfc-52e6-b5d4-b4f29caef8cc",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:55358bb1-bd73-5a22-b5c6-83633eb57450",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c33d4f43-9100-5200-8c2e-fad6bbf8b69e",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae6dfcc3-5d6b-5dbb-89fd-fb89e36213a0",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:52859ead-0d3a-5a5a-b9fa-b8b2c9fb635f",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b4c3438-48d6-5d88-8145-33f52983c030",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a4b18b19-46a7-552a-bb83-102a2185bd31",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:b408cc14-6253-52bb-b5db-c13e6afb892c",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5b9b58c1-9976-5c57-b04d-63d88b0afeee",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ee8886d-f4a7-57ca-adc5-ebed00a3e499",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c67127bc-da11-5387-a992-950d01a08acd",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7d121963-112e-5bd2-a86a-b6d8edac2a15",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:04c0b404-2f89-50ef-abba-bb49e61822b8",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8cc20082-20e7-573d-9ceb-1cdf133bb895",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a11b6b1e-6036-5913-89b5-b3335f53e5fe",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2014-0119 is a false positive for org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1e2e3e1a-61d1-5898-9919-56034b2ff4a1",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0130bd2f-7410-5536-ad5d-0db714c01b90",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5f4a47ba-32de-5ff7-af6d-1fcf25caf066",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:aa173b41-a518-5b07-896d-19269bc566b7",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5bdcedd2-02d9-5a37-9b51-20c4fb2ea48e",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3a7943ad-5fb8-5151-9d5d-95be83044a9b",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8d2e5d3f-7991-56e0-85e6-910dd8147196",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2a01f962-daea-5858-a704-e81e1cd7838a",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d09da1d-cdbf-5aa0-9520-4c1686e4d972",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09c8d20d-87c3-5f82-bcfe-825b2f3b86a0",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e472a633-4f15-56bd-9829-06da195e290f",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22932 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb11a574-2ed2-5596-a730-1f36d1edbc13",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0cdc83f3-9d2e-5973-a728-64d759b30c71",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6260df06-498b-5e9d-9c87-68031fc68d1b",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-23184 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:09054f4e-17df-56ec-b549-36cff2cc574b",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ccf44eaf-218a-5c82-8928-7130880aeb7d",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48795 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e814a33e-d677-546c-b6e2-4cecee639a82",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.services.ws-discovery:cxf-services-ws-discovery-service."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.services.ws-discovery/cxf-services-ws-discovery-service@3.5.9-tuxcare.5"
    }
  ]
}