{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:029cf824-66cb-5ef9-b954-a5943fe015fa", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5", "type": "library", "group": "org.apache.tika", "name": "tika", "version": "2.9.4-tuxcare.5", "purl": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:9b2c81f9-7b34-5170-9813-8521dfc46323", "id": "CVE-2012-6612", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2012-6612 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:66b82b4a-80b5-507b-b328-ce008ee9309f", "id": "CVE-2013-6397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:0fd4e67f-0216-5078-8d33-6caa9d13e702", "id": "CVE-2013-6407", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6407 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:ecbe3f96-348f-5d4d-87ec-052b7311b35d", "id": "CVE-2013-6408", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:944f69c5-32b2-5907-8b6f-f765172f6f3e", "id": "CVE-2015-3414", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b1e67f40-3b9b-57b9-9988-229ca81b579e", "id": "CVE-2015-3415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:48b9ff5a-d859-56e5-94c2-007f7cd49e53", "id": "CVE-2015-3416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:fa993cf8-f980-558e-9692-fee710e66706", "id": "CVE-2015-3717", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:7e01c689-ae05-59ba-b375-0bb199773b97", "id": "CVE-2015-5895", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:092e284a-2ef4-524e-aff0-d9993a6ba092", "id": "CVE-2015-6607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b21bd401-75a8-5019-bede-bcba2947f3de", "id": "CVE-2015-8795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4279a4df-f802-5c32-b345-7da217acadb5", "id": "CVE-2015-8796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:578db4af-f81c-514d-95f4-dd05b3fa1b7e", "id": "CVE-2015-8797", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:22e48385-53e6-555c-938d-0bca710d0226", "id": "CVE-2016-6153", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5ccacd3d-44e9-5ef7-8744-612729e5c947", "id": "CVE-2017-10989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:60fafb76-d7da-58bd-a849-d04a83ee3fa4", "id": "CVE-2017-3163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4019ac25-11a1-58f6-adb9-e05abc2333f6", "id": "CVE-2017-3164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9fa17dc6-6494-5fa9-93cd-96c41073f241", "id": "CVE-2018-11802", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11802 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4725d320-f2a4-587b-8c2c-8e2fa18a91b7", "id": "CVE-2018-1308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2376a536-4107-5412-bfc3-46ccab5b1066", "id": "CVE-2018-20346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a1a969b3-b185-57c3-bdc6-be689e63a86b", "id": "CVE-2018-20505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:60ccbd24-9636-56fa-968e-0191ee41968f", "id": "CVE-2018-20506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:957c4d05-9fe3-5b96-bc02-9af89c8f738c", "id": "CVE-2018-8740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4c4f8b4e-d349-5059-a347-172aab17392b", "id": "CVE-2019-0193", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0193 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:a65550b1-e84d-5995-bd82-f935d08a8679", "id": "CVE-2019-19645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:9ef9ae4c-c325-5284-8070-09a19394ea64", "id": "CVE-2019-19646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bfc4026d-066f-5a05-a3db-b5346d6a1a67", "id": "CVE-2020-11655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:16d0534d-8802-5eb6-ad1f-3bae186455c6", "id": "CVE-2020-11656", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:abb5036b-c376-5e1b-9479-d7ce923c1181", "id": "CVE-2020-13434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5f6f6970-2533-586c-b939-4b2c0af04f90", "id": "CVE-2020-13435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:6b6125fa-9709-59ad-a9ed-ab9ab58d961d", "id": "CVE-2020-13630", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:be046359-fbd2-585c-85c0-fb3a4d0bcb8d", "id": "CVE-2020-13631", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:2f70edb6-f115-51f9-a9ff-6dd60a04a8d8", "id": "CVE-2020-13632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:304555b7-e568-5d05-b72c-ccc61c5852a4", "id": "CVE-2020-13941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:846e905c-5819-5571-8b58-f48587187c25", "id": "CVE-2020-15358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:52e3b8fe-8f64-54bf-9380-5d90687e9ac1", "id": "CVE-2021-27905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:c3c9d9f6-287d-5b96-ab94-1aa8aa72ae92", "id": "CVE-2021-29262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:bdfeb25d-b453-5be8-b7ad-6ad1ce1b31bf", "id": "CVE-2021-29943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4e83977e-20c1-5f11-af72-39e7a0446afd", "id": "CVE-2021-44548", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:668a0c3e-ece2-500b-b148-8db678a65cc5", "id": "CVE-2022-35737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:b1fc99bc-79d9-5688-9d9e-c25753f0c94c", "id": "CVE-2023-34610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:028e51f0-2c50-5ce1-9700-01b681d79e02", "id": "CVE-2023-44487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:f53fd961-76c5-5d93-b6c0-11fecee47963", "id": "CVE-2023-7104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:56f00721-0184-592b-b773-4d5ddfd3fa97", "id": "CVE-2024-31141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:82cc5974-2f63-590e-a3f3-9390a39ebb0e", "id": "CVE-2024-56128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:4c521ebe-352d-5c06-b443-829fe6363fc6", "id": "CVE-2025-27819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:5915b9e3-70f4-5384-bd25-d70c17d77cdc", "id": "CVE-2025-54988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }, { "bom-ref": "urn:uuid:d1ce7f10-ef90-55d6-b8b4-41bdca61f501", "id": "CVE-2025-66516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.5 of org.apache.tika:tika." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tika/tika@2.9.4-tuxcare.5" } ] }