{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:68ebbaba-d360-520d-bd68-e4a76df30e7f", "version": 1, "metadata": { "tools": [ { "name": "tuxcare-vex-generator", "version": "1.0.0" } ] }, "components": [ { "bom-ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8", "type": "library", "group": "org.apache.tika", "name": "tika-batch", "version": "2.9.4-tuxcare.8", "purl": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ], "vulnerabilities": [ { "bom-ref": "urn:uuid:a4d07736-23e8-580d-964a-e5e449ad4cdd", "id": "CVE-2012-6612", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2012-6612 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch. Version 2.9.4 is not affected by CVE-2012-6612: the security fix is already present in the target branch. Momus prerequisite check: \"All 7 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f9a90dd2-f0a4-5c73-bebe-ed4d0055fb9b", "id": "CVE-2013-6397", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6397 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:269915bb-9afa-5dfc-ac76-1c759b741e00", "id": "CVE-2013-6407", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2013-6407 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch. Version 2.9.4 is not affected by CVE-2013-6407: the security fix is already present in the target branch. Momus prerequisite check: \"All 4 patch commits already exist in target branch\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0bcb3ae4-e79d-52b8-bf48-149b7fbecd94", "id": "CVE-2013-6408", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2013-6408 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6f05b9d4-d053-5809-a218-9c7ded0d365b", "id": "CVE-2015-3414", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3414 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:42e115ad-53c5-508d-a4c0-d0dac82330c0", "id": "CVE-2015-3415", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3415 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:74ff0984-c192-5802-8d02-392f541a81c5", "id": "CVE-2015-3416", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3416 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:75cbba51-99a0-5f97-96b0-74002541ad21", "id": "CVE-2015-3717", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3717 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:add22949-03d0-548e-b515-215b01b2eede", "id": "CVE-2015-5895", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5895 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9ec535b7-264e-53d0-a75d-d8d93d4167e3", "id": "CVE-2015-6607", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-6607 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9d68beac-d347-567b-b7d5-e0e9172fffdf", "id": "CVE-2015-8795", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8795 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:11b209fb-f9ac-5242-9628-4d9041085002", "id": "CVE-2015-8796", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8796 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5763571a-2302-5eca-86c1-e692688c459a", "id": "CVE-2015-8797", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-8797 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e4d44356-c05c-5397-9232-ebce530d0fd7", "id": "CVE-2016-6153", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2016-6153 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:892ee7db-bf76-5647-a877-4cefbfe563f0", "id": "CVE-2017-10989", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-10989 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:bb9afb2e-2d45-5b2e-ba94-4deb43b29d0e", "id": "CVE-2017-3163", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3163 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ea8860ec-126e-5afe-a874-3ce034ce918f", "id": "CVE-2017-3164", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-3164 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f2efbaee-38bd-5e2e-be01-a81140f00690", "id": "CVE-2018-11802", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2018-11802 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch. Version 2.9.4 is not affected by CVE-2018-11802: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 302f22aff7a836868b270038e1d66002a2004869\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:77815dcc-3c9b-590d-bf90-89f98882d126", "id": "CVE-2018-1308", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-1308 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2378bb3b-cdec-56d8-888c-7bb2ef12e63b", "id": "CVE-2018-20346", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20346 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9181d71f-d37d-5b3f-bcf0-301c6b5dcc73", "id": "CVE-2018-20505", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20505 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:388f1fc2-dc98-5907-9028-b40a9fd4bd07", "id": "CVE-2018-20506", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-20506 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b3a67211-0571-50a0-894e-1b64a85a04da", "id": "CVE-2018-8740", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8740 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f6f3a744-bcd9-54b8-a69e-95a2d2af89d3", "id": "CVE-2019-0193", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2019-0193 does not affect version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch. Version 2.9.4 is not affected by CVE-2019-0193: the security fix is already present in the target branch. Momus prerequisite check: \"Patches already applied: 1b81d200e8ffb882276264618c9004ba4bf72ecb\". No backport needed." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:a2b30653-d78a-555e-891f-63e3d340edb7", "id": "CVE-2019-19645", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19645 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:88f4e218-667a-52f0-890f-236a240365c9", "id": "CVE-2019-19646", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-19646 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:0f3a8d70-48b0-5e48-b9ee-66bd867d6e2c", "id": "CVE-2020-11655", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11655 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:e4d3a6b8-cf69-5b17-bbe4-45aa53fed286", "id": "CVE-2020-11656", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-11656 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:fbaf9cfe-968b-50dc-9169-7dca6b61c055", "id": "CVE-2020-13434", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13434 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:eb919e1f-7951-5840-baf6-1b8bdb6d8d82", "id": "CVE-2020-13435", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13435 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:25f8a7b4-c36c-57fb-ba4b-29815aff2f0c", "id": "CVE-2020-13630", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13630 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c2dabf95-28e7-5f54-b919-44783f4d084b", "id": "CVE-2020-13631", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13631 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:275e5234-92a9-569b-8e9e-07d461524a10", "id": "CVE-2020-13632", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13632 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:5f2004d3-6047-5aaa-9692-8bf58571dfe5", "id": "CVE-2020-13941", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-13941 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:7d1461a8-bdd4-5c13-8e1d-92bf22ad4ce8", "id": "CVE-2020-15358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-15358 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:ba41875d-54ee-51a1-b08e-69ae7900b28f", "id": "CVE-2021-27905", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-27905 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d1d8f765-1bd4-5282-9127-64fadaa63d38", "id": "CVE-2021-29262", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29262 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:489cb33c-d9c5-5116-b33f-661af9a0202f", "id": "CVE-2021-29943", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-29943 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:6712b827-4b5b-5304-8895-995e22409a55", "id": "CVE-2021-44548", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-44548 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:b800fe23-301c-55ae-971f-19fea7593519", "id": "CVE-2022-35737", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-35737 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d2c0d2b6-8dc9-570c-bbf3-b77ffa2e6f33", "id": "CVE-2023-34610", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2023-34610 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:c5a5d2a8-e3e7-5f39-b106-d5c4b4d05649", "id": "CVE-2023-44487", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44487 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:2f344f4a-0758-53f1-8b56-fbda07538cbd", "id": "CVE-2023-7104", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-7104 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:036c4f6f-87cf-50e4-82a1-c90406c0052c", "id": "CVE-2024-31141", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-31141 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:f1c4fe27-4ffb-5014-a74b-7230424cb8ec", "id": "CVE-2024-56128", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-56128 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:d942d618-9477-5b44-b5f6-b52fe9cc8b8b", "id": "CVE-2025-27819", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-27819 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:812cf800-5ae0-5801-b779-9b7f3afb83d9", "id": "CVE-2025-54988", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-54988 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:9f9e69cf-b172-5a6f-846d-f9e88b30a028", "id": "CVE-2025-66516", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2025-66516 is fixed in version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }, { "bom-ref": "urn:uuid:04bf617b-4025-5f41-b405-b2ad4540101c", "id": "CVE-2026-66755", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-66755 affects version 2.9.4-tuxcare.8 of org.apache.tika:tika-batch." }, "affects": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] } ], "dependencies": [ { "ref": "pkg:maven/org.apache.tika/tika-batch@2.9.4-tuxcare.8" } ] }