{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:5b103fcf-c756-5802-9177-811cb07bdc05",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "elasticsearch-rest-high-level-client",
      "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1",
      "type": "library",
      "group": "org.elasticsearch.client",
      "bom-ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1",
      "version": "7.17.15-tuxcare.1",
      "pedigree": {
        "ancestors": [
          {
            "name": "elasticsearch-rest-high-level-client",
            "purl": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15",
            "type": "library",
            "group": "org.elasticsearch.client",
            "version": "7.17.15"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2014-3120",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a6c8e2e8-5732-5158-9bf4-2d0370870013",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-3120 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2014-6439",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b0612952-a196-50af-a0e7-93b7c5fbae4f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2014-6439 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2015-1427",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:f0ca790a-6c27-54ba-acc1-b49a2923098b",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-1427 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2015-3337",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:eaebac33-fc9e-5ce9-b572-b4891b378300",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-3337 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2015-4165",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:1237d1e4-c9c0-57c4-9bce-67d4cc5e241c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-4165 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2015-5531",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:bc56c952-36b1-5c27-93aa-ff89e4efe2aa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2015-5531 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2018-17244",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6dbf4e68-6375-5a5d-9ea6-4acc4ef8584a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-17244 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2018-17247",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d98a9738-9185-50dc-a726-fa8e9a30e362",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-17247 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2018-3824",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6b8c2243-c0b9-5be6-9c57-04ca689855ec",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-3824 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2018-3831",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:39b67290-3fe4-590f-b2b4-683896d65514",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2018-3831 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2019-7611",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:38fd47b3-59a2-523d-b0ed-28f85ae4d8f5",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-7611 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2019-7614",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9754ce6b-cd40-5c57-a30a-59541db7c770",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-7614 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2019-7619",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b2c26a49-8622-516c-8e2e-1d00460c2383",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2019-7619 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7009",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:ec94ddd0-1832-5402-988b-09dd16e562fa",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7009 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7014",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:31172c5d-f845-55a1-9d81-2dc478fe0d53",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7014 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7019",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d09388ee-6599-5382-a88d-335acdd51683",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7019 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7020",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:c2a57cfc-b780-5585-9f83-a2a178b57465",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7020 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2020-7021",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:815092c0-cc33-5eb2-9928-9de934adca20",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2020-7021 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22132",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:6f0e79b4-87b7-5ff7-ac00-f078e22495c4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22132 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22134",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e67ee374-b1c2-527f-9d22-f928a3188af8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22134 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22135",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:857607d2-3a5a-5f22-b3d1-f66d44e459ae",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22135 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22137",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:632f9c9a-12a6-56f8-9dc0-0deb25d5df28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22137 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22144",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:2af00d23-0b27-531f-94e8-b31f16e9129c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22144 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22145",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e83b36f4-19c2-574c-9a43-e6d21c58913e",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22145 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2021-22147",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:b118e2b4-b3d0-50f8-8181-eaad37043958",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2021-22147 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2022-23708",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:9debd740-13f5-5f4d-982e-e33d6c7d00d8",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23708 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2022-23710",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a8e3ff3e-5cb5-5ca8-b207-f95d307f094d",
      "analysis": {
        "state": "false_positive",
        "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.client:elasticsearch-rest-high-level-client 7.17.15-tuxcare.1."
      }
    },
    {
      "id": "CVE-2022-23712",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:17d9c48a-2d08-52a7-911d-bcba0c3b0cdd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2022-23712 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-31417",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8b1ebb42-2326-5847-9a3f-e83a33db9b0c",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-31417 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-31418",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:0aa89826-51fe-5ad1-ab92-5648ee365b5f",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-31418 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-31419",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:11793558-ac11-5d8f-9aa0-701eedcfdd28",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-31419 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-46673",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8cbe9b35-e067-5854-b9a6-d8e2420331b1",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-46673 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2023-49921",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:13983552-9016-5729-af93-a641d4ad1b9a",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2023-49921 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-12539",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:19bc9e38-6665-5808-b91c-a16b635090bd",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-12539 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23444",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:612a587b-f3b1-50b3-a3fb-619483e1a59c",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23446",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:26cf2ba8-1c3e-5bb6-99b2-a7b37de33c91",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23446 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23449",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:39b99ed4-a7ae-558f-bcf5-5e152d73d592",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23449 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23450",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:32546142-eeef-5428-a2e6-c5939d8f7e32",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23450 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-23451",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:dad79ba7-1df8-5499-857d-e45f5e3409f4",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-23451 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-37280",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54d0963a-279f-5862-aba5-43b54c3f7169",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-37280 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-43709",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:54a726f4-b480-51fb-9e3f-ab0d72017813",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-52979",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:e21628bb-1b76-53eb-b8ca-dc4e61b87ec1",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-52980",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:74177e28-9dec-5d97-8959-447769034ddb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52980 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2024-52981",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:d6e9363a-2299-58c6-9de1-e05f735ae17d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2024-52981 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2025-37727",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:a43dba8e-5b5f-5410-b214-c796cee4b63d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-37727 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2025-37731",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:8f21d184-1345-5130-b725-a90f31493c8d",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-37731 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    },
    {
      "id": "CVE-2025-68384",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:82f35b3a-fc44-568c-b458-fb43acb6784e",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-68384 does not affect version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client. not_affected \u2014 Elasticsearch 7.17.15 does not contain the User Profile feature (ProfileService) that is affected by CVE-2025-68384. The vendor patches add size validation to ProfileService.updateProfileData(), which stores user profile labels and applicationData. This entire feature was introduced in Elasticsearch 8.2+ and is completely absent from the 7.x series. Exhaustive searches confirm no ProfileService...",
        "justification": "code_not_present"
      }
    },
    {
      "id": "CVE-2025-68390",
      "affects": [
        {
          "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
        }
      ],
      "bom-ref": "urn:uuid:50785a2a-36e8-574e-a4ba-39e76f424f79",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2025-68390 affects version 7.17.15-tuxcare.1 of org.elasticsearch.client:elasticsearch-rest-high-level-client."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.elasticsearch.client/elasticsearch-rest-high-level-client@7.17.15-tuxcare.1"
    }
  ]
}