{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:82cd1664-6d2a-53cc-9fc5-e887db23d500", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "mapper-extras-client", "purl": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2", "type": "library", "group": "org.elasticsearch.plugin", "bom-ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2", "version": "7.16.3-tuxcare.2", "pedigree": { "ancestors": [ { "name": "mapper-extras-client", "purl": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3", "type": "library", "group": "org.elasticsearch.plugin", "version": "7.16.3" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-3120", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:77efbc0d-cf86-5cd5-8c29-9df46ceccaa8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3120 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2014-6439", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:0535146c-db7c-5efc-bcbb-79b494ba01d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-6439 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-1427", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1194ba54-ec9d-5da7-ac0a-f0c66b09a2ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1427 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-3337", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:21aee6e4-e106-5e57-8f01-d556a43d0fa7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3337 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-4165", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:702e0167-bd27-5c75-9d26-0e31c1686da3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-4165 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-5531", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:92da7aee-5dc7-5ac0-84c6-0a0fa939338a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5531 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-17244", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:12baedcd-8d90-5f00-bb3c-850eb986d7f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17244 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-17247", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8c263792-9199-5b9f-b9b3-96ca685cf8eb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17247 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-3824", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:66b63e64-51d7-5c71-839f-c5423153b7e7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3824 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-3831", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1ef9eeb5-341e-5a11-820f-5d520c000cd0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3831 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7611", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:5dc573a3-499b-55cb-9c26-7c15cf74aa47", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7611 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7614", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:66551555-9028-5b5b-92aa-97c1f1330199", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7614 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7619", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9c668578-5cb3-5e79-b88f-d6a5764ad1ac", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7619 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7009", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:73411c96-48a3-5e31-b3d1-0f4e1937d0ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7009 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7014", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a864058e-f752-5ab0-bf78-fba70466a4ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7014 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7019", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:15b767ba-5d98-54ac-adba-6a99400bbca2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7019 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7020", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:9049fd96-b806-55f8-8ef3-ac335ae2a539", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7020 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7021", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:a35a2296-8ed0-5fae-bc10-a847ffd04581", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7021 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22132", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e97d3383-a23f-5e9d-915b-a0e5e22b3f8f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22132 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22134", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:55e61808-26db-57d9-84a7-d567cdc2264f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22134 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22135", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:07a28d9c-0236-57ce-b03c-4da3d89d9fc2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22135 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22137", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:8e5b3e1c-ca65-572f-bec1-e71ef4c28bb7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22137 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22144", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3568637c-901b-55ce-bfee-d0050d41ef68", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22144 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22145", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:4ced17a0-5604-5417-81ae-d4e493e4ae8e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22145 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22147", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:17efe669-b740-5cff-8955-91a2d88e847d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22147 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2022-23708", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:2b9696ba-4ae7-538c-bf88-c0f99507d546", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23708 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2022-23710", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f45353f2-ac22-5b0e-9e00-9a590459bf82", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.plugin:mapper-extras-client 7.16.3-tuxcare.2." } }, { "id": "CVE-2022-23712", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:45176091-471f-575e-8640-d1381e84161c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23712 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31417", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:80c81a52-ee23-58b4-a451-1c846e6f4150", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31417 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31418", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e989d8a8-bd30-54db-80dd-5c881866ede7", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31418 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31419", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:251659c8-60a1-56d1-81d3-938d59aa8936", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-31419 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-46673", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:931bac2b-a4a2-5918-812b-0142de584892", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-46673 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-46674", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:60dde749-e185-52cc-bcb2-be6273f508e7", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2023-46674 does not affect version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client. not_affected \u2014 Elasticsearch 7.16.3 does not contain the ESQL datasource plugins (Parquet, ORC, Iceberg) targeted by CVE-2023-46674. The ESQL feature was introduced in Elasticsearch 8.11, released in 2023, while this target version is from 2021. The vulnerability pattern (unsafe deserialization via Hadoop Configuration) cannot manifest because the affected code paths do not exist.", "justification": "code_not_present" } }, { "id": "CVE-2023-49921", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f5e826c1-4789-51d6-ae26-924f2beb774d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49921 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-12539", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:1678cb20-8128-52ce-853b-12576e6a47b7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-12539 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23444", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:339dc553-6492-5925-a4a9-8071907d62ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23449", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:f7df41f1-b8d8-55ad-bdf8-035aaedec144", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23449 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23450", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:aaf6a3d0-44cb-5a40-b88c-7dce918765d0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23450 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23451", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:b6257107-2e35-5dff-8cfd-21a3546f4792", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23451 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-37280", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:75675ac3-1b73-5149-8ef4-fc7978119dc7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37280 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-43709", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:50872413-41ac-5314-ba3a-bdf8140fbaf5", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-52979", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:c8357443-097d-5056-97fd-247d48956ff3", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-52981", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:36e71677-19cb-5baf-abc3-7f3b62ad3c55", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52981 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-37727", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:81a92531-7dfb-5d38-84a0-d2435fed9f94", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37727 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-37731", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:e2f4aa26-032f-5576-aa13-cf3a734f767f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37731 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-68384", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:3702dc8e-12b9-5954-bd27-41281f56da7f", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-68384 does not affect version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client. not_affected \u2014 Elasticsearch 7.16.3 does not contain the user profile feature that is vulnerable in CVE-2025-68384. The entire user profile functionality (ProfileService, UpdateProfileDataRequest, profile REST endpoints) was introduced in Elasticsearch 8.x and does not exist in this version. The vulnerability affects code that validates profile data size during updates, but since the profile update mechanism ...", "justification": "code_not_present" } }, { "id": "CVE-2025-68390", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ], "bom-ref": "urn:uuid:fa65d1b3-39da-5ca7-bd3d-4730907afa97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-68390 affects version 7.16.3-tuxcare.2 of org.elasticsearch.plugin:mapper-extras-client." } } ], "dependencies": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.16.3-tuxcare.2" } ] }