{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:2c3ee8a2-9f0f-507a-87a2-c685b4bebe36", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "activemq-all", "purl": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3", "type": "library", "group": "org.apache.activemq", "bom-ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3", "version": "6.1.6-tuxcare.3", "pedigree": { "ancestors": [ { "name": "activemq-all", "purl": "pkg:maven/org.apache.activemq/activemq-all@6.1.6", "type": "library", "group": "org.apache.activemq", "version": "6.1.6" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2013-1879", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:1da92efc-f008-5798-bf18-3f5ee4737b5c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2013-3060", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:5816dad7-6f6b-5b92-9614-e0805cce09b2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3576", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:6eb35daf-a40d-538e-a1f7-14c69f971f50", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3600", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f6496993-6619-5fb3-8de5-8849b087d323", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-3612", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:9ffcefb3-d148-5486-92cb-262d375c9f03", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2014-8110", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f1bf6865-55db-51cd-957d-ca0825d9f25b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-1830", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:672bf374-4194-5133-98a7-86f5d9f1b935", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-3208", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:62975121-f0c0-5c94-8673-cbdfbef17a1a", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-all 6.1.6-tuxcare.3." } }, { "id": "CVE-2015-5254", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:6d5d5caf-e7e7-5b6b-ae72-3a315dab94ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-6524", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:0da3e1ca-737c-5768-a487-d945d86417c5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2015-7559", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:d5a9792d-a032-5355-b9ec-cdf3994775bd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-0734", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:6d83be75-69cc-53fc-a813-1110d14aa0ec", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-0782", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:efb4ba61-a1c5-5996-bbc9-6f995c4cd756", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-3088", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:bfcf4393-9bff-5e68-8205-89e204c4486a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2016-6810", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f3b4dfbf-5acc-5b9c-bb28-d3b505b1f7cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2018-11775", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f3488ae6-6728-563a-be32-3563bf12303b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2019-0222", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f7b9cd4f-7ac0-55d9-a6a5-d1bd69fe5a4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2023-46604", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:5626acd4-c313-58f1-ba49-16abe88f92e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2025-27533", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:768a743e-2d8f-5284-be70-85c63a4803ed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2025-66168", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:d5219d6d-cde4-570f-b53c-79a2a4c972a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-33227", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:cdfa8f49-b6af-5344-b104-0d6a6b4d73fb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-34197", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:8ec67c43-9f32-5433-a23f-34226d313732", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-39304", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:fcb9b34d-f062-5f7b-b9ca-fc84e2f95627", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-40046", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:a20cc0fb-17da-590e-b207-591c275e0ab6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-40466", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:767a05dd-36b4-54ff-b7fc-dceec369d6f6", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-41043", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:ea5be290-4486-50c0-85bb-82cf7ce4fe5d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-41044", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:022caeb2-15c4-56ea-9d82-29f253d09045", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-42588", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:ffd19055-6704-5641-8ce7-5fdccaaa7174", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-45505", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:f80fc1de-d66d-5d6e-97fa-4ae7e3207382", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49270", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:47516c72-69ba-5918-867e-a96092ead260", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49432", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:ddc1f3b1-793e-5387-ae90-4899509c69ae", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49432 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-49434", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:e50f3d08-326b-57c3-ae1a-e03c7bedd60a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-49434 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-53916", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:adec487a-4726-554e-b372-e395b37c2238", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-53916 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-53917", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:dea274f5-a06c-5ced-ba60-0451a4b7b63d", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2026-53917 is fixed in version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-54475", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:b4229f40-d08a-5513-ad2c-6b58e3483115", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-54475 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-59878", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:0904b54a-00bf-5ddf-8305-7930c13a1da6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59878 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-61487", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:c1267fe3-712c-5dba-9a25-c3e29527c42a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-61487 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } }, { "id": "CVE-2026-74761", "affects": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ], "bom-ref": "urn:uuid:7f5817f0-3929-505e-9237-93a0df6a5d4b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-74761 affects version 6.1.6-tuxcare.3 of org.apache.activemq:activemq-all." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.activemq/activemq-all@6.1.6-tuxcare.3" } ] }