{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:bf1420ff-bc63-598b-a5a0-c91223c8ade6", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4", "type": "library", "group": "org.apache.tika", "name": "tika-core", "version": "2.9.4-tuxcare.4", "purl": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:c3cc0114-993d-5cc8-8fff-054518755a89", "id": "CVE-2012-6612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2a3bdd76-546f-5a68-a9a2-3f9f00ae86d2", "id": "CVE-2013-6397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:184a4cfe-de9d-5643-9a34-11c16944db9e", "id": "CVE-2013-6407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f2f5e9d7-9d13-5e84-beae-9e1094ab2135", "id": "CVE-2013-6408", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ca8b3b26-19e4-5a18-9fdd-921afc5cb919", "id": "CVE-2015-3414", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0585977a-98f3-5413-91b7-212259358c86", "id": "CVE-2015-3415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:18c74ba6-9c14-5fcf-b1df-512f552bd616", "id": "CVE-2015-3416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:28c309aa-f399-5bd7-8171-6196d83c3fd1", "id": "CVE-2015-3717", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:9cbe4b2a-e8c8-5355-b831-84799b0438a5", "id": "CVE-2015-5895", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:335b3e7b-9114-548c-9848-d511c423dbce", "id": "CVE-2015-6607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f44a264b-1aad-52b2-a76e-66828202e953", "id": "CVE-2015-8795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4dc7d28c-1fac-558a-b09c-7d946f111298", "id": "CVE-2015-8796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:86ae5069-c6ef-5bac-9a2e-b2863768ab21", "id": "CVE-2015-8797", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0a1a044e-4e79-52c4-abbb-f9d5b37f7ad1", "id": "CVE-2016-6153", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c725693c-878d-57a9-b7c8-7aac6afcbb52", "id": "CVE-2017-10989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:6aa40a13-d145-546c-bb8a-6cc76fb46083", "id": "CVE-2017-3163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:13777152-90aa-5518-a65d-e3dc149fb333", "id": "CVE-2017-3164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:01657db6-bc98-562c-812e-80557d0630f3", "id": "CVE-2018-11802", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:5b3a2c3e-a47e-52d4-a79f-dff4d79b1ccf", "id": "CVE-2018-1308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:38f4bae5-aa42-5a0e-8f24-41822e43d949", "id": "CVE-2018-20346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:aa0c7bd7-38ea-5d16-84d3-79a8f9e068a7", "id": "CVE-2018-20505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:1580ea6c-f392-573a-b0fb-8c3c7eaa933d", "id": "CVE-2018-20506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:b8ea39f6-6630-5461-80d2-0f4f2903d6a1", "id": "CVE-2018-8740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:301b1d90-c937-539e-bbd8-614f50d98cde", "id": "CVE-2019-0193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e56aece4-e7ad-5861-89a9-b5657d116f90", "id": "CVE-2019-19645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:71e30a79-2b91-5b1c-b7a1-fbcf2e3ca517", "id": "CVE-2019-19646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2aad65be-9f21-5472-8be8-6e0cb73d703d", "id": "CVE-2020-11655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c1d81a11-fe9e-5189-b98d-67224836567a", "id": "CVE-2020-11656", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:c64fb344-0f9b-5cde-a5ba-6c357874cf57", "id": "CVE-2020-13434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:f2790d36-0da7-52c5-b34a-c9c7dee91bf1", "id": "CVE-2020-13435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:8dfa9dde-b9ff-506d-bdc6-f281ace3eada", "id": "CVE-2020-13630", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:e9ab814b-9c02-5208-9f98-ffa75a1c430e", "id": "CVE-2020-13631", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:300c993f-aaed-5778-a47c-728a15069190", "id": "CVE-2020-13632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:20b8ae1b-85ce-5af1-83f9-0801e6399743", "id": "CVE-2020-13941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:fc584a2e-b635-5410-a6cf-8bb7b8a1d737", "id": "CVE-2020-15358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:26af07dd-ac46-5525-8805-45171529f4cc", "id": "CVE-2021-27905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:de1af288-bb41-576e-8b60-d5fa1f947e46", "id": "CVE-2021-29262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bedd4053-7473-5516-8a59-489d5642d5be", "id": "CVE-2021-29943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:944040a3-3a7c-543b-95c8-68ea5f1e1279", "id": "CVE-2021-44548", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:4baf570b-fd0e-5e79-a95c-377740397180", "id": "CVE-2022-35737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:780a1788-c6ca-5a32-bc13-6710546fd2cb", "id": "CVE-2023-34610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:0469de16-24d6-5e5b-ac14-d21cad749392", "id": "CVE-2023-44487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:65ea15b7-f5b3-5075-8517-7e5c0542d35f", "id": "CVE-2023-7104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:bebfa0f6-a59f-5deb-b1d8-51d6850352b0", "id": "CVE-2024-31141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dbc86db0-3712-593f-8881-a436787fd883", "id": "CVE-2024-56128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:dc3011fa-a242-5060-9d3a-13e529b0a69e", "id": "CVE-2025-27819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:2e87f1e7-fde7-5eaa-9766-d9b5a77bbeaf", "id": "CVE-2025-54988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }, { "bom-ref": "urn:uuid:ebc6f9d9-d4e6-5ada-93b3-e707f7c8d266", "id": "CVE-2025-66516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.4 of org.apache.tika:tika-core." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tika/tika-core@2.9.4-tuxcare.4" } ] }