{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:eb51f5a5-9960-5e7a-b86d-1cee9bb31aa9", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "activemq-all", "purl": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2", "type": "library", "group": "org.apache.activemq", "bom-ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2", "version": "6.1.6-tuxcare.2", "pedigree": { "ancestors": [ { "name": "activemq-all", "purl": "pkg:maven/org.apache.activemq/activemq-all@6.1.6", "type": "library", "group": "org.apache.activemq", "version": "6.1.6" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2013-1879", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6f690a0f-33be-56dc-89c9-7508b2edb755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2013-3060", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6eba2f25-4ffb-5f82-b91a-daeb4589d461", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3576", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:9119f213-d288-503f-a651-954fba3777cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3600", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:20f8f303-8b94-5667-a07e-6d54071a269c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3612", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6feac021-3f76-56f5-a8af-7d32b29c0b6b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-8110", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:84af3dd6-9e6f-5120-a7a2-6d76dcb1f019", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-1830", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:9efd6a88-2e90-5f90-9b32-fddd95879201", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-3208", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:88d9716b-94e7-5a0a-90a3-6bb09fb4c46b", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-all 6.1.6-tuxcare.2." } }, { "id": "CVE-2015-5254", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:74d75e5e-357e-5dbb-b8df-7ba0307a40ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-6524", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b0d34863-9b89-5e91-aff2-aa84eb31ab6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-7559", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e77cc2f3-d17f-56eb-ada2-bac3f16e6196", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-0734", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:50872717-310a-577c-b83d-ab598abb9a3f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-0782", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:90edbe8c-df5c-58e6-85b0-ec608c63f766", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-3088", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:dfecafb7-3025-5bc0-bdf1-260560a752b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-6810", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:2fd8229f-4093-5333-b088-04229282c09f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2018-11775", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:bba613b2-98ab-5782-9673-a432cef8e5f8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2019-0222", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:fac70400-b4e4-5516-aa07-baa905c7bedd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2023-46604", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b71c5927-f8a0-591b-b7e2-a1f4d1a1df34", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2025-27533", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b02b1bd0-5703-529e-b623-2c94bdc6c2de", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2025-66168", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:b55c1c9e-fe7b-5dc6-a45e-8fac3abf5df3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-33227", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:4fa89e91-b65c-50fb-a25a-99bc860ea977", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-34197", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:af294665-cbcf-5cb6-a117-b1e28a885079", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-39304", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:8051c6c4-1585-507d-aee0-584c1a149091", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-40046", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6b99208d-3f94-5454-b3bd-bbf28f9787ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-40466", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:83682bbb-3a73-50a6-9eac-af5472bc1847", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-41043", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:852d8314-6486-5989-aa52-56cacf2d700f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-41044", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:6f424b77-a51a-5e14-a17b-7f4748bec4ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-42588", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:a3e8d4fd-21b4-500c-9adf-8ccf7cb84596", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-45505", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:67e9b160-bb72-57c0-92ec-fa6f72ff1e6e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49270", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:e427e5a1-a0da-55e9-8e58-2710c699dad0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49432", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:5a6a9be8-3f0a-566e-85bf-81b1efb7bc60", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49432 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49434", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:61781f0e-60a3-53a7-bb3e-423a5c4c96b0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49434 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-50734", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:220be8f6-89ab-558f-b2be-22a711e970e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-50734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-53916", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:803ccd13-a315-53a9-8c3e-5f4807224997", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53916 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-53917", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:ae46bae0-c84e-57ec-accb-395ed6d18ed4", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-54475", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:046f4f2b-c9d5-55c3-b746-c618cd18d2a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54475 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-59878", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:565d4b9d-813e-5b76-bf5c-405da2b18c30", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59878 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-61487", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:fc133b74-4026-5b1d-afa4-8c0aa3c0dd5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-61487 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-74761", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ], "bom-ref": "urn:uuid:40d87a93-535c-51a2-8e18-2801df22552b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-all." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.2" } ] }