{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:98665e45-294c-5daf-9d1c-4ac190dcdd1f", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "reindex-client", "purl": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1", "type": "library", "group": "org.elasticsearch.plugin", "bom-ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1", "version": "7.17.15-tuxcare.1", "pedigree": { "ancestors": [ { "name": "reindex-client", "purl": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15", "type": "library", "group": "org.elasticsearch.plugin", "version": "7.17.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-3120", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:aa3ef573-685e-5dc1-9f3e-69f75298c501", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3120 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2014-6439", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d2bd81c1-7a4c-5493-9e57-103acdb974a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-6439 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2015-1427", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4fdb0133-4d68-5313-9905-2dae18629380", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1427 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2015-3337", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5d992e40-d19d-5b27-9da4-d1ef5d07ec6f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3337 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2015-4165", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:63348bc3-cfd0-51e8-89f8-11051cf95278", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-4165 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2015-5531", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:be6fbf1d-4aac-588f-8ba5-d1f2e4743bed", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5531 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2018-17244", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:b030afc0-5dae-58e0-8d90-52f3055824b5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17244 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2018-17247", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5f2dacf4-ff89-555d-a40c-c3ab2b7a8111", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17247 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2018-3824", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9307e987-dd3c-5458-8253-7070fedf7afe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3824 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2018-3831", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6ff2ba21-6de5-54b6-be42-18694724a9d8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3831 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2019-7611", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ac844dd8-f277-5055-b385-de40c6611709", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7611 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2019-7614", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:b6464cf6-a882-5ef6-baf5-83b2f50d30e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7614 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2019-7619", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d4fced39-b6f8-53c8-adf6-b5ff51dc705d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7619 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2020-7009", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f953de6f-24c6-5ad0-9b45-771050c7f489", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7009 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2020-7014", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:8175c735-e4aa-5d5c-9d55-3a6281704832", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7014 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2020-7019", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:51decb45-bade-565c-b220-0700ffa6f514", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7019 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2020-7020", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0ca9b5f1-5d10-5346-b903-9deb3437f6c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7020 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2020-7021", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4d07458e-aa6e-5568-a9af-9d7ae7dde7a6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7021 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22132", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4b26933a-80ca-5633-b75c-2cdd8ac57ff6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22132 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22134", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:8b7033a8-f03b-5dc2-bc84-6b4c6666acdb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22134 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22135", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:df3adc24-7be3-55ab-8f7d-4f72b65048b1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22135 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22137", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6c5f8078-93ff-5f1b-a814-21bc3f5414d4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22137 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22144", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:aebc3698-053f-5172-b6d8-0184a9f7550b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22144 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22145", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9045168f-4587-504a-b04f-1b6049443a27", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22145 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2021-22147", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:55f9930f-f9e8-59a6-8bd5-3d28c11624bc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22147 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2022-23708", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:b25063e3-707e-5387-b2b9-ab7473a1eecb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23708 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2022-23710", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d50443a6-010b-5215-a487-64bcc29289f1", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.plugin:reindex-client 7.17.15-tuxcare.1." } }, { "id": "CVE-2022-23712", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d3f01342-1d47-55e4-bb2e-b55f523829dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23712 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2023-31417", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:8459a76c-e7ca-561a-8c77-71f283185e5f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31417 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2023-31418", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:adf0754c-29ea-5b01-b48d-b289a58848d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31418 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2023-31419", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:28b0f32a-2f9e-58d5-894e-999a5b290fe3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31419 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2023-46673", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:48f0b0d9-5bae-57d1-9124-20c877029f0f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46673 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2023-49921", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f00dce80-9a1e-58ee-bbb5-ce7c85b94a4a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49921 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-12539", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6a5b9524-19ce-50a6-949e-0a5d33e1fade", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-12539 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-23444", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4f60c7f2-b87f-5682-a1ba-2546e173c0ab", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-23446", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:133d315d-ab08-57f9-abe9-bf6b15c0841e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23446 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-23449", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:7ef0507b-850f-5cca-a1e0-0ad41b6f4057", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23449 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-23450", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ee3eb60f-8638-582c-bac2-b24866dcf3e6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23450 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-23451", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:c9ae6710-7dfc-54a1-8858-b8484ed95256", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23451 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-37280", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:99badf79-a2b2-53bd-bb99-898640ae61cb", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37280 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-43709", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:1d70d652-3768-56bc-ba95-3d5f90d4f72b", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-52979", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:7deadca0-bd0b-5872-bf61-3550fdf13043", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-52980", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:98a4d9c1-a169-5a16-89d8-bd7d0ad1e4ba", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52980 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2024-52981", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4981b03c-156f-5dbb-bb3c-07b311bed1a4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52981 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2025-37727", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:035e7daa-e1b7-5f62-b0eb-640890ddb44b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37727 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2025-37731", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:502c235a-9eb4-55e1-8db0-9bd8e1146b2f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37731 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } }, { "id": "CVE-2025-68384", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:d1f10c4b-e8fe-57ff-a529-2436e71167b3", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-68384 does not affect version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client. not_affected \u2014 Elasticsearch 7.17.15 does not contain the User Profile feature (ProfileService) that is affected by CVE-2025-68384. The vendor patches add size validation to ProfileService.updateProfileData(), which stores user profile labels and applicationData. This entire feature was introduced in Elasticsearch 8.2+ and is completely absent from the 7.x series. Exhaustive searches confirm no ProfileService...", "justification": "code_not_present" } }, { "id": "CVE-2025-68390", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f26d344a-5ffc-58cc-8cb5-8f10c874348b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-68390 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:reindex-client." } } ], "dependencies": [ { "ref": "pkg:maven/org.elasticsearch.plugin/reindex-client@7.17.15-tuxcare.1" } ] }