{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ddbbb936-5ac6-5c36-a730-16a06d6bb68a", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "mapper-extras-client", "purl": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1", "type": "library", "group": "org.elasticsearch.plugin", "bom-ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1", "version": "7.17.15-tuxcare.1", "pedigree": { "ancestors": [ { "name": "mapper-extras-client", "purl": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15", "type": "library", "group": "org.elasticsearch.plugin", "version": "7.17.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-3120", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e38411c5-70b1-51b7-a536-126fa2963601", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3120 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2014-6439", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:49cd1176-8e9f-5da2-a417-f4cfb2729129", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-6439 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-1427", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:885bf6a8-f751-5a09-9eff-bdcd26f926ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1427 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-3337", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0376bcf7-fa26-55c5-a5d9-65cf381015bb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3337 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-4165", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:48d56642-6c56-5b98-8383-30abf6134629", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-4165 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2015-5531", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e9f3573b-88e3-5a36-bc1c-2fd1fe7bc62d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5531 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-17244", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:c65d557b-8e22-5fab-82b1-13a1d4b868c8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17244 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-17247", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:a360dd51-5ffa-5702-ad91-0d3935825b3c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17247 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-3824", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6b3a1ef7-005e-5eef-8e21-2526d41c0ba0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3824 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2018-3831", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:3f7a73d2-631c-5bf9-9010-3ab05e75fd78", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3831 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7611", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:2118cc4f-546f-574e-bdd0-bf7ea9eb9621", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7611 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7614", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0af331f1-9dc4-533c-a4a5-116eabcfbcc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7614 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2019-7619", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d249b1df-7a5f-5ee4-af0a-0d30b7c76dc3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7619 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7009", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:daab73b7-50a1-5524-9005-6a798da5edb8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7009 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7014", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4526abd7-7a4d-593d-bd92-ecc31ed349b4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7014 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7019", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:c2eadd98-761d-5763-8792-3b0e4f326f25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7019 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7020", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:da8859fa-ec14-5d37-aa18-04532ed2b6c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7020 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2020-7021", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f1aa7bfe-bae0-5e40-9390-4a08b97fdeb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7021 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22132", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:3255f199-8872-52bf-b84f-1292560e974a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22132 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22134", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0b6e093e-cd03-56b4-bfd4-57874008ddd3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22134 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22135", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:7f3567fc-bcb6-5405-8606-aa3a779250d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22135 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22137", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:c7494d6c-61cd-55dc-8e7d-09525973b432", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22137 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22144", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9299d6f3-1677-5c39-8aca-ab35dca90abf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22144 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22145", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5fbf4484-fc8d-5280-ac5b-6087879f245c", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22145 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2021-22147", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:422054a9-21ff-5681-8c33-51d1fb0293c9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22147 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2022-23708", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f591e6d8-a1ee-565c-b489-8d8891226d66", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23708 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2022-23710", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:1fd4ea10-25ba-55d4-8aa8-4e2fd1376977", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.plugin:mapper-extras-client 7.17.15-tuxcare.1." } }, { "id": "CVE-2022-23712", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:06a3e6c5-1f37-5b94-b3cc-2859e435fd38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23712 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31417", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4707e7f9-7745-59ef-adb8-7b7a5add1d83", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31417 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31418", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:b587132d-fb99-5f7e-9393-e2e76b970543", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31418 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-31419", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4e1354a5-173f-5d08-b9bb-209cb5c88c0a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31419 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-46673", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9d22c938-898d-5235-9a54-9ae3c8f4bb37", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46673 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2023-49921", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5f8f55c8-09e9-585d-938a-95a54bcf8d38", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49921 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-12539", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:a4d0e439-9252-56f9-8ad2-441dd8ac6eb6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-12539 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23444", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:23b97bfc-8e7c-550d-88ed-05b0543e34dc", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23446", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:01bc06c0-5246-5500-a68d-442f7bb62acc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23446 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23449", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ecbf392b-f324-59fa-9e63-93e741bb8391", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23449 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23450", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:223c2cbb-f214-5874-925f-b54a4b3779f4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23450 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-23451", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e88b4fcf-a5d3-5395-9636-d55a6ee2b0e9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23451 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-37280", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ab4fa6f7-f564-5f05-bd68-381e7e36f99a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37280 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-43709", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d2f96a70-8122-5a4c-b08a-6f74c4c99875", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-52979", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:fb648aa9-7e97-5e9b-a1a4-269e997edbab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-52980", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:2c14b09a-0240-5ace-84c6-fe3cfac9d1da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52980 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2024-52981", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:cd11a226-36f9-589f-92af-9fe5f2dc2a11", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52981 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-37727", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e5e19a69-8554-54eb-a4c8-e73fa0bf06ea", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37727 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-37731", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0d12993e-f095-5b69-9f3a-4be7d815d8f0", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37731 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } }, { "id": "CVE-2025-68384", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:fb06308d-6290-5f47-bc03-54515843669a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-68384 does not affect version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client. not_affected \u2014 Elasticsearch 7.17.15 does not contain the User Profile feature (ProfileService) that is affected by CVE-2025-68384. The vendor patches add size validation to ProfileService.updateProfileData(), which stores user profile labels and applicationData. This entire feature was introduced in Elasticsearch 8.2+ and is completely absent from the 7.x series. Exhaustive searches confirm no ProfileService...", "justification": "code_not_present" } }, { "id": "CVE-2025-68390", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0e3742e5-5de4-54c9-b631-895375f1ee33", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-68390 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:mapper-extras-client." } } ], "dependencies": [ { "ref": "pkg:maven/org.elasticsearch.plugin/mapper-extras-client@7.17.15-tuxcare.1" } ] }