{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:134c1992-13d1-5f87-adc8-accda83b16eb",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "elasticsearch-rest-high-level-client",
      "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2",
      "type": "library",
      "group": "org.elasticsearch.client",
      "bom-ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2",
      "version": "7.16.3-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "elasticsearch-rest-high-level-client",
            "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3",
            "type": "library",
            "group": "org.elasticsearch.client",
            "version": "7.16.3"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2018-3831",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:5c1f13af-263b-5102-8af0-6767b7d28a7d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-3831 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2019-7611",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:60465775-4a12-5b93-b55a-0fd04cdec7a5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-7611 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2019-7614",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:429b8bf8-a826-5b92-80e6-812dc6eacb49",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-7614 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7019",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d820d121-bec0-54ed-b087-15f23d99aad7",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7019 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7020",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:977c7724-ae6a-5b0d-ba14-631cd82d0f80",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7020 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7021",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:3d89b391-0b5e-5e72-8cf0-49506e7fa6f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7021 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22135",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:14b60908-5e69-5d49-a4b7-23b9fb2a96ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22135 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22137",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e9d1002e-b35a-5781-82ae-faf29a08863b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22137 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22144",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:a9070bbd-3cc9-5bbc-a999-4cd2f8665d65",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22144 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22145",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:e95c4be5-8d2c-5177-abf7-7d2652cc7704",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22145 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2022-23708",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:0d377b0b-8dd9-5c0b-a1b7-37d9b99c4fb8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23708 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2022-23710",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:da65012d-7137-59e6-8cbe-3ec69a43cf01",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.client:elasticsearch-rest-high-level-client 7.16.3-tuxcare.2."
      }
    },
    {
      "id": "CVE-2023-31417",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:36787a66-b5cc-54c0-96de-c46e663ac317",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-31417 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-31418",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8f19707d-cfe8-572a-9a96-f3d35bae0ded",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-31418 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-31419",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:d70b40ad-1999-5ade-94ce-5f4d811f7bfe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-31419 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-46673",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:f6377348-401b-520f-b2c9-cc474b6ac9ab",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2023-46673 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-46674",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:cf6ec8d1-ecba-5070-afe0-1f9996c11516",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2023-46674 does not affect version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client. not_affected \u2014 Elasticsearch 7.16.3 does not contain the ESQL datasource plugins (Parquet, ORC, Iceberg) targeted by CVE-2023-46674. The ESQL feature was introduced in Elasticsearch 8.11, released in 2023, while this target version is from 2021. The vulnerability pattern (unsafe deserialization via Hadoop Configuration) cannot manifest because the affected code paths do not exist.",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2023-49921",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:75d702ec-0619-5898-a225-b0a053c7c630",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-49921 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23444",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:ceb255af-0c68-58d2-9d56-762e9ab9cb39",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23450",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:8a57c97a-f839-5a2e-bf08-2074c9b734a0",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23450 affects version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-43709",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:64e57e53-4961-5dbd-abe7-4192c716185f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-52979",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:65f5630d-0413-5244-a9bf-b1362711162d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.16.3-tuxcare.2"
    }
  ]
}