{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:51600f1c-3bc9-58e8-b459-306361ac34aa",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "activemq-web-demo",
      "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2",
      "type": "library",
      "group": "org.apache.activemq",
      "bom-ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2",
      "version": "6.1.6-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "activemq-web-demo",
            "purl": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6",
            "type": "library",
            "group": "org.apache.activemq",
            "version": "6.1.6"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2012-6551",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f8646f0a-a0d6-5c3a-99be-04e26b6b7634",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2012-6551 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2013-1879",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0d1940b1-9205-5b79-97df-d7229949a019",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-1879 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2013-3060",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f7b5a5eb-039f-5178-96d2-6bda863cc9f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2013-3060 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2014-3576",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:09e032df-c54e-567b-94a5-c0ca2c28fc82",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3576 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2014-3600",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0eeb022c-dc31-5cc6-ab9a-8010e34c19b0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3600 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2014-3612",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:14d1fd09-4d1f-5a72-815e-911f69532013",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3612 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2014-8110",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ab92a0e6-5a88-502b-a9d8-28e55cf13a51",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-8110 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2015-1830",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:66bed9c1-c619-5c94-90fc-63fc1da6af93",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1830 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2015-3208",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:80fc3bd9-03fa-5f53-adf6-f8f3888cd5ac",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2015-3208 is a false positive for org.apache.activemq:activemq-web-demo 6.1.6-tuxcare.2."
      }
    },
    {
      "id": "CVE-2015-5254",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:56f52092-ec83-58dd-bde8-2e4de5b57120",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5254 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2015-6524",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7845f529-87f3-557f-904c-3b0cf4e82001",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-6524 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2015-7559",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:1dd3eec8-a249-5a98-9cfa-e3012d33ad96",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-7559 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2016-0734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:49683894-b93c-59f0-91b4-eb7f6b44bf3b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0734 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2016-0782",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c72a75e-2939-5550-8840-6b8e8ea9b499",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-0782 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2016-3088",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:29847b71-2a18-52c0-b961-dad91ac91965",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-3088 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2016-6810",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a1160f7e-544f-5a69-8c15-088a7e0d740a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2016-6810 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2018-11775",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:395718e6-7f57-5b32-80a4-a739ee6986ef",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-11775 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2019-0222",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0f6de1db-0ce9-5901-8289-4385b2451fde",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-0222 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2023-46604",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:05e9a52d-d406-5509-abcc-dbce913a8f4f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46604 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2025-27533",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:9d6ffdb4-0db2-5d3c-8b63-6cd664fca6c2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-27533 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2025-66168",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:79a0f324-96fd-557f-910e-be3a4c00a75c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-66168 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-33227",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ccdc83bd-b84a-5f58-9b41-a5a96f789bd5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-33227 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-34197",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:41683d09-57f0-5f05-8e73-4a7e9b453991",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34197 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-39304",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:53e946e4-9873-5089-8088-4cec5da74089",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-39304 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-40046",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0c463c69-6f8e-5574-822f-a7bcdd2d48d9",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-40046 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-40466",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:01fbad10-2f2a-5c94-a217-2c606ab7ec6f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-40466 is fixed in version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-41043",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6977c8fd-cfbe-5753-9b0b-9b1386002646",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41043 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-41044",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d5f85ee2-0a7e-588f-92dc-fb9512d981f2",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-41044 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-42253",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:11f3c0cc-2428-58ce-a7d2-d29c93167f97",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42253 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-42588",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:35722188-07dc-5fea-b2f0-90a6ef0b43fc",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42588 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-45505",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7713e7ca-65a8-57b0-94d8-49fcf4685b8f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-45505 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    },
    {
      "id": "CVE-2026-49270",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:7bf12689-5c2d-550c-8d77-75b6d89feb72",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-49270 affects version 6.1.6-tuxcare.2 of org.apache.activemq:activemq-web-demo."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.activemq/activemq-web-demo@6.1.6-tuxcare.2"
    }
  ]
}