{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:4a754e11-87aa-500d-b315-5167a5b05d1e",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5",
      "type": "library",
      "group": "org.apache.cxf.systests",
      "name": "cxf-microprofile-tck",
      "version": "3.5.9-tuxcare.5",
      "purl": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:a81f61e6-6af6-5716-a932-1a71d7b8f879",
      "id": "CVE-2005-4838",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2005-4838 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:08dad39c-fa92-593f-9852-92ae2a7b3557",
      "id": "CVE-2006-7196",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2006-7196 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd4ce534-c9d0-5ead-8702-5d1225c7ba74",
      "id": "CVE-2007-1358",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-1358 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ad22e3e6-4202-55e3-bfa2-82d8725edc36",
      "id": "CVE-2007-2449",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2007-2449 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:4198642c-16d2-5f35-aad6-83927e613734",
      "id": "CVE-2008-0128",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2008-0128 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:bea392c7-e7e5-57e5-8c86-610cb8487e18",
      "id": "CVE-2009-2696",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2009-2696 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ae7a5ff2-e3d2-5b28-b079-c37f4f6f2555",
      "id": "CVE-2010-1151",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2010-1151 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:93bd2bfa-67ab-5a23-b244-66e5316bc5c0",
      "id": "CVE-2013-2185",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-2185 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96f98120-2ff0-56c8-9d49-3af98b265730",
      "id": "CVE-2013-4286",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4286 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cdc03702-e371-593b-a71f-41eb57205f02",
      "id": "CVE-2013-4322",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4322 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1227bbbe-4213-542f-b9b9-a82d52bf23d4",
      "id": "CVE-2013-4444",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4444 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8081824c-c36a-5a70-a5a8-ac51f8533d99",
      "id": "CVE-2013-4590",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-4590 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1d60af70-1fb1-5e9c-ba57-2f839962bff5",
      "id": "CVE-2013-6357",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-6357 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cb92ecda-747d-5d67-8bf6-1af00034fc9f",
      "id": "CVE-2014-0075",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0075 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:671da06f-7a03-513e-a15a-ee75139bd55b",
      "id": "CVE-2014-0096",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0096 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:50265b02-6ce5-58a2-a71d-53a87f22b821",
      "id": "CVE-2014-0099",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0099 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:277a8785-264a-560d-bc58-26c3cbb3c044",
      "id": "CVE-2014-0119",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2014-0119 is a false positive for org.apache.cxf.systests:cxf-microprofile-tck 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cef70ab6-f072-5cd6-9154-8e77b71e48ae",
      "id": "CVE-2014-0219",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-0219 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:19a91099-d71b-5fa4-b911-60096a3f2571",
      "id": "CVE-2016-8735",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8735 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cd5407d8-0337-5315-bf73-fd61954da4f6",
      "id": "CVE-2016-8750",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-8750 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:adf39c18-9f94-5b28-a002-671d5043dc40",
      "id": "CVE-2018-11786",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11786 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7c7a2716-8120-5a88-b80e-c73e48d3a4c6",
      "id": "CVE-2018-11788",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11788 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e649e17-39c6-5cd5-8369-a08d2b8b937e",
      "id": "CVE-2019-0191",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0191 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d8b4e288-2b63-5ca9-aa99-be2df4d174f3",
      "id": "CVE-2019-0226",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0226 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7ef401d0-4256-5222-8cd5-d4d795bd8834",
      "id": "CVE-2020-11980",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-11980 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:939284bd-647f-5673-a000-4b2d978e34fc",
      "id": "CVE-2020-8022",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2020-8022 is a false positive for org.apache.cxf.systests:cxf-microprofile-tck 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c4d49620-53f2-52ea-8ead-869864f385f3",
      "id": "CVE-2021-41766",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-41766 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f2f17782-abc8-57c7-85f5-da803059f3c8",
      "id": "CVE-2022-22932",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-22932 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:25fee982-6de1-553b-9def-ddffe94ca0cf",
      "id": "CVE-2022-40145",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-40145 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7e2276c4-2bcc-50b6-a552-e2a41650bfa3",
      "id": "CVE-2025-15104",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2025-15104 is a false positive for org.apache.cxf.systests:cxf-microprofile-tck 3.5.9-tuxcare.5."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a298c8f7-d2fd-53e9-84d7-35dee9812fb9",
      "id": "CVE-2025-23184",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-23184 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d2466af6-fceb-5781-ae66-c3e3d1fba6c9",
      "id": "CVE-2025-24813",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-24813 affects version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6a30533b-d2b0-5c59-8dd9-91bf153d59bf",
      "id": "CVE-2025-48795",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48795 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eca560b3-b38e-5319-8987-220f9338527d",
      "id": "CVE-2025-48913",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48913 is fixed in version 3.5.9-tuxcare.5 of org.apache.cxf.systests:cxf-microprofile-tck."
      },
      "affects": [
        {
          "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.cxf.systests/cxf-microprofile-tck@3.5.9-tuxcare.5"
    }
  ]
}