{
  "@id": "urn:uuid:8657ea60-8627-4ee1-a71b-161e6a496742",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-29T15:30:49.741847+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2016-2173 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2016-2173"
      },
      "action_statement": "Vulnerability CVE-2016-2173 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T15:30:49.741847+00:00",
      "status_notes": "Vulnerability CVE-2017-8045 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2017-8045"
      },
      "action_statement": "Vulnerability CVE-2017-8045 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2018-11087 does not affect version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test. not_affected \u2014 CVE-2018-11087 is not present in Spring AMQP 1.7.14.RELEASE. The fix (commit aff4d0aef) was shipped in the upstream release and adds hostname verification capability via RabbitConnectionFactoryBean.setEnableHostnameVerification(). While disabled by default in 1.x (enabled by default in 2.x per patch 3), Rule 3 explicitly classifies \"disable-by-default\" as a valid fix strategy. The defense code ...",
      "vulnerability": {
        "name": "CVE-2018-11087"
      },
      "impact_statement": "not_affected \u2014 CVE-2018-11087 is not present in Spring AMQP 1.7.14.RELEASE. The fix (commit aff4d0aef) was shipped in the upstream release and adds hostname verification capability via RabbitConnectionFactoryBean.setEnableHostnameVerification(). While disabled by default in 1.x (enabled by default in 2.x per patch 3), Rule 3 explicitly classifies \"disable-by-default\" as a valid fix strategy. The defense code ..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:17:00.108799+00:00",
      "status_notes": "Vulnerability CVE-2021-22095 is fixed in version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2021-22095"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2021-22097 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2021-22097"
      },
      "action_statement": "Vulnerability CVE-2021-22097 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2026-41701 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2026-41701"
      },
      "action_statement": "Vulnerability CVE-2026-41701 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2026-41714 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2026-41714"
      },
      "action_statement": "Vulnerability CVE-2026-41714 affects version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:17:00.108799+00:00",
      "status_notes": "Vulnerability CVE-2026-47860 is fixed in version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2026-47860"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2026-59272 does not affect version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test. not_affected \u2014 Version 1.7.14.RELEASE is not affected by CVE-2026-59272. The Log4j2 AMQP appender in this version does not have SSL/TLS support - the vulnerable code pattern (verifyHostname defaulting to false when useSsl=true) cannot exist because the useSsl configuration option itself is not present. SSL support for the Log4j2 appender was added in commit 09f03c74e (July 2016) as part of the 2.0.x branch an...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-59272"
      },
      "impact_statement": "not_affected \u2014 Version 1.7.14.RELEASE is not affected by CVE-2026-59272. The Log4j2 AMQP appender in this version does not have SSL/TLS support - the vulnerable code pattern (verifyHostname defaulting to false when useSsl=true) cannot exist because the useSsl configuration option itself is not present. SSL support for the Log4j2 appender was added in commit 09f03c74e (July 2016) as part of the 2.0.x branch an..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-test@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:17:00.108799+00:00",
      "status_notes": "Vulnerability CVE-2026-59275 is fixed in version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit-test.",
      "vulnerability": {
        "name": "CVE-2026-59275"
      }
    }
  ]
}