Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 6.1.5
Report Generated On: Tue, 28 Sep 2021 09:15:58 GMT
Dependencies Scanned: 173 (173 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 7
...
NVD CVE Checked: 2021-09-28T09:13:11
NVD CVE Modified: 2021-09-28T05:00:02
VersionCheckOn: 2021-09-21T14:35:09

Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
HdrHistogram-2.1.12.jar		pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12		26
HikariCP-4.0.3.jar		pkg:maven/com.zaxxer/HikariCP@4.0.3		36
LatencyUtils-2.0.3.jar		pkg:maven/org.latencyutils/LatencyUtils@2.0.3		16
accessors-smart-2.4.7.jar	cpe:2.3:a:json_smart_project:json_smart:2.4.7:::::::*	pkg:maven/net.minidev/accessors-smart@2.4.7	Low	30
antlr-2.7.7.jar		pkg:maven/antlr/antlr@2.7.7		23
apiguardian-api-1.1.0.jar		pkg:maven/org.apiguardian/apiguardian-api@1.1.0		28
asm-9.1.jar		pkg:maven/org.ow2.asm/asm@9.1		35
aspectjweaver-1.9.7.jar		pkg:maven/org.aspectj/aspectjweaver@1.9.7		37
automaton-1.11-8.jar		pkg:maven/dk.brics.automaton/automaton@1.11-8		24
awaitility-4.0.1.jar		pkg:maven/org.awaitility/awaitility@4.0.1		25
bcpkix-jdk15on-1.64.jar		pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.64		60
bcprov-jdk15on-1.64.jar	cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.64:::::::* cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.64:::::::*	pkg:maven/org.bouncycastle/bcprov-jdk15on@1.64	Low	51
byte-buddy-1.9.16.jar		pkg:maven/net.bytebuddy/byte-buddy@1.9.16		26
byte-buddy-1.9.16.jar (shaded: net.bytebuddy:byte-buddy-dep:1.9.16)		pkg:maven/net.bytebuddy/byte-buddy-dep@1.9.16		9
byte-buddy-agent-1.10.22.jar		pkg:maven/net.bytebuddy/byte-buddy-agent@1.10.22		32
byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll				2
byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll				2
caffeine-2.9.2.jar		pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.2		29
checker-qual-3.10.0.jar		pkg:maven/org.checkerframework/checker-qual@3.10.0		32
classgraph-4.8.44.jar		pkg:maven/io.github.classgraph/classgraph@4.8.44		36
classmate-1.5.1.jar		pkg:maven/com.fasterxml/classmate@1.5.1		47
commons-codec-1.15.jar		pkg:maven/commons-codec/commons-codec@1.15		41
commons-collections4-4.4.jar	cpe:2.3:a:apache:commons_collections:4.4:::::::*	pkg:maven/org.apache.commons/commons-collections4@4.4	Highest	41
commons-compress-1.21.jar	cpe:2.3:a:apache:commons-compress:1.21:::::::* cpe:2.3:a:apache:commons_compress:1.21:::::::*	pkg:maven/org.apache.commons/commons-compress@1.21	Highest	45
commons-io-2.8.0.jar	cpe:2.3:a:apache:commons_io:2.8.0:::::::*	pkg:maven/commons-io/commons-io@2.8.0	Highest	42
commons-lang3-3.12.0.jar		pkg:maven/org.apache.commons/commons-lang3@3.12.0		41
commons-logging-1.2.jar		pkg:maven/commons-logging/commons-logging@1.2		36
content-type-2.1.jar		pkg:maven/com.nimbusds/content-type@2.1		41
dom4j-2.1.3.jar	cpe:2.3:a:dom4j_project:dom4j:2.1.3:::::::*	pkg:maven/org.dom4j/dom4j@2.1.3	Highest	16
entando-k8s-custom-model-6.3.1.jar	cpe:2.3:a:quarkus:quarkus:6.3.1:::::::*	pkg:maven/org.entando/entando-k8s-custom-model@6.3.1	Low	36
error_prone_annotations-2.5.1.jar		pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1		23
faux-pas-0.8.0.jar		pkg:maven/org.zalando/faux-pas@0.8.0		20
generex-1.0.2.jar		pkg:maven/com.github.mifmif/generex@1.0.2		25
h2-1.4.199.jar	cpe:2.3:a:h2database:h2:1.4.199:::::::*	pkg:maven/com.h2database/h2@1.4.199	Highest	38
hamcrest-2.2.jar		pkg:maven/org.hamcrest/hamcrest@2.2		30
hibernate-commons-annotations-5.1.2.Final.jar		pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final		39
hibernate-core-5.4.28.Final.jar	cpe:2.3:a:hibernate:hibernate_orm:5.4.28:::::::*	pkg:maven/org.hibernate/hibernate-core@5.4.28.Final	Low	40
httpclient-4.5.13.jar	cpe:2.3:a:apache:httpclient:4.5.13:::::::*	pkg:maven/org.apache.httpcomponents/httpclient@4.5.13	Highest	34
httpcore-4.4.14.jar		pkg:maven/org.apache.httpcomponents/httpcore@4.4.14		34
istack-commons-runtime-3.0.12.jar	cpe:2.3:a:oracle:java_se:3.0.12:::::::*	pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12	Low	37
jackson-annotations-2.12.4.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4	Low	42
jackson-core-2.12.4.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4	Low	49
jackson-databind-2.10.5.1.jar	cpe:2.3:a:fasterxml:jackson-databind:2.10.5.1:::::::* cpe:2.3:a:fasterxml:jackson-modules-java8:2.10.5.1:::::::*	pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1	Highest	42
jackson-dataformat-yaml-2.9.9.jar	cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.9.9:::::::*	pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.9.9	Highest	43
jackson-datatype-jdk8-2.12.4.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:::::::*	pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.4	Low	41
jackson-datatype-jsr310-2.12.4.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:::::::*	pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.4	Low	41
jackson-datatype-problem-0.23.0.jar		pkg:maven/org.zalando/jackson-datatype-problem@0.23.0		22
jackson-module-jaxb-annotations-2.12.4.jar		pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4		45
jackson-module-parameter-names-2.12.4.jar	cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:::::::*	pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.4	Low	39
jakarta.activation-1.2.2.jar	cpe:2.3:a:oracle:java_se:1.2.2:::::::*	pkg:maven/com.sun.activation/jakarta.activation@1.2.2	Low	37
jakarta.activation-api-1.2.2.jar		pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2		32
jakarta.annotation-api-1.3.5.jar		pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5		32
jakarta.mail-1.6.7.jar	cpe:2.3:a:oracle:java_se:1.6.7:::::::*	pkg:maven/com.sun.mail/jakarta.mail@1.6.7	Low	47
jakarta.persistence-api-2.2.3.jar		pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3		31
jakarta.servlet-api-4.0.4.jar		pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4		37
jakarta.transaction-api-1.3.3.jar	cpe:2.3:a:oracle:projects:1.3.3:::::::*	pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3	Low	39
jakarta.xml.bind-api-2.3.3.jar		pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3		34
jandex-2.2.3.Final.jar		pkg:maven/org.jboss/jandex@2.2.3.Final		45
java-semver-0.9.0.jar		pkg:maven/com.github.zafarkhaja/java-semver@0.9.0		24
javassist-3.23.1-GA.jar		pkg:maven/org.javassist/javassist@3.23.1-GA		26
javax.activation-api-1.2.0.jar		pkg:maven/javax.activation/javax.activation-api@1.2.0		38
javax.annotation-api-1.3.2.jar		pkg:maven/javax.annotation/javax.annotation-api@1.3.2		39
javax.persistence-api-2.2.jar	cpe:2.3:a:oracle:java_se:2.2:::::::*	pkg:maven/javax.persistence/javax.persistence-api@2.2	Low	33
jaxb-api-2.3.1.jar	cpe:2.3:a:oracle:java_se:2.3.1:::::::*	pkg:maven/javax.xml.bind/jaxb-api@2.3.1	Low	36
jaxb-runtime-2.3.4.jar	cpe:2.3:a:oracle:java_se:2.3.4:::::::*	pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.4	Low	46
jboss-logging-3.4.2.Final.jar		pkg:maven/org.jboss.logging/jboss-logging@3.4.2.Final		47
jboss-transaction-api_1.2_spec-1.1.1.Final.jar		pkg:maven/org.jboss.spec.javax.transaction/jboss-transaction-api_1.2_spec@1.1.1.Final		42
jcip-annotations-1.0-1.jar		pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1		21
jcl-over-slf4j-1.7.32.jar		pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32		33
jna-4.5.1.jar		pkg:maven/net.java.dev.jna/jna@4.5.1		37
jna-4.5.1.jar: jnidispatch.dll				2
jna-4.5.1.jar: jnidispatch.dll				2
jna-platform-4.5.1.jar		pkg:maven/net.java.dev.jna/jna-platform@4.5.1		33
json-path-2.5.0.jar		pkg:maven/com.jayway.jsonpath/json-path@2.5.0		30
json-smart-2.4.7.jar	cpe:2.3:a:json_smart_project:json_smart:2.4.7:::::::*	pkg:maven/net.minidev/json-smart@2.4.7	Highest	32
jsr305-3.0.2.jar		pkg:maven/com.google.code.findbugs/jsr305@3.0.2		17
jul-to-slf4j-1.7.32.jar		pkg:maven/org.slf4j/jul-to-slf4j@1.7.32		28
kubernetes-client-4.7.0.jar	cpe:2.3:a:kubernetes:java:4.7.0:::::::*	pkg:maven/io.fabric8/kubernetes-client@4.7.0	Low	22
kubernetes-model-4.7.0.jar	cpe:2.3:a:kubernetes:java:4.7.0:::::::* cpe:2.3:a:oracle:java_se:4.7.0:::::::*	pkg:maven/io.fabric8/kubernetes-model@4.7.0	Low	42
kubernetes-model-common-4.7.0.jar		pkg:maven/io.fabric8/kubernetes-model-common@4.7.0		36
lang-tag-1.5.jar	cpe:2.3:a:nim-lang:nim-lang:1.5:::::::*	pkg:maven/com.nimbusds/lang-tag@1.5	High	43
liquibase-core-4.3.1.jar		pkg:maven/org.liquibase/liquibase-core@4.3.1		36
log4j-api-2.13.2.jar	cpe:2.3:a:apache:log4j:2.13.2:::::::*	pkg:maven/org.apache.logging.log4j/log4j-api@2.13.2	Highest	46
logback-classic-1.2.4.jar	cpe:2.3:a:qos:logback:1.2.4:::::::*	pkg:maven/ch.qos.logback/logback-classic@1.2.4	Highest	32
logback-core-1.2.4.jar	cpe:2.3:a:qos:logback:1.2.4:::::::*	pkg:maven/ch.qos.logback/logback-core@1.2.4	Highest	32
logging-interceptor-3.14.9.jar	cpe:2.3:a:squareup:okhttp:3.14.9:::::::* cpe:2.3:a:squareup:okhttp3:3.14.9:::::::*	pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9	Highest	21
lombok-1.18.20.jar		pkg:maven/org.projectlombok/lombok@1.18.20		24
micrometer-core-1.7.2.jar		pkg:maven/io.micrometer/micrometer-core@1.7.2		48
mockito-core-3.9.0.jar		pkg:maven/org.mockito/mockito-core@3.9.0		27
mysql-connector-java-8.0.26.jar	cpe:2.3:a:mysql:mysql:8.0.26:::::::* cpe:2.3:a:oracle:mysql_connector\/j:8.0.26:::::::*	pkg:maven/mysql/mysql-connector-java@8.0.26	Highest	43
nimbus-jose-jwt-9.10.jar	cpe:2.3:a:connect2id:nimbus_jose\+jwt:9.10:::::::*	pkg:maven/com.nimbusds/nimbus-jose-jwt@9.10	Highest	49
oauth2-oidc-sdk-9.9.jar		pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.9		54
objenesis-3.2.jar		pkg:maven/org.objenesis/objenesis@3.2		31
ojdbc8-19.3.0.0.jar	cpe:2.3:a:oracle:jdbc:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/ojdbc8@19.3.0.0	Highest	26
okhttp-3.14.9.jar	cpe:2.3:a:squareup:okhttp:3.14.9:::::::* cpe:2.3:a:squareup:okhttp3:3.14.9:::::::*	pkg:maven/com.squareup.okhttp3/okhttp@3.14.9	Highest	19
okio-1.17.2.jar		pkg:maven/com.squareup.okio/okio@1.17.2		19
ons-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/ons@19.3.0.0	Low	22
oraclepki-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/oraclepki@19.3.0.0	Low	21
org.osgi.core-4.3.1.jar		pkg:maven/org.osgi/org.osgi.core@4.3.1		28
org.osgi.enterprise-4.2.0.jar		pkg:maven/org.osgi/org.osgi.enterprise@4.2.0		18
osdt_cert-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/osdt_cert@19.3.0.0	Low	25
osdt_core-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/osdt_core@19.3.0.0	Low	26
postgresql-42.2.13.jar	cpe:2.3:a:postgresql:postgresql:42.2.13:::::::* cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.2.13:::::::*	pkg:maven/org.postgresql/postgresql@42.2.13	Highest	45
problem-0.23.0.jar		pkg:maven/org.zalando/problem@0.23.0		22
problem-spring-common-0.25.2.jar		pkg:maven/org.zalando/problem-spring-common@0.25.2		29
problem-spring-web-0.25.2.jar		pkg:maven/org.zalando/problem-spring-web@0.25.2		29
problem-violations-0.25.2.jar		pkg:maven/org.zalando/problem-violations@0.25.2		26
simplefan-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/simplefan@19.3.0.0	Low	20
slf4j-api-1.7.32.jar		pkg:maven/org.slf4j/slf4j-api@1.7.32		29
snakeyaml-1.27.jar	cpe:2.3:a:snakeyaml_project:snakeyaml:1.27:::::::*	pkg:maven/org.yaml/snakeyaml@1.27	Highest	28
spring-aop-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-aop@5.3.9	Highest	29
spring-aspects-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-aspects@5.3.9	Highest	27
spring-beans-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-beans@5.3.9	Highest	29
spring-boot-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot@2.5.3	Highest	30
spring-boot-actuator-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.3	Highest	30
spring-boot-actuator-autoconfigure-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.3	Highest	32
spring-boot-autoconfigure-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.3	Highest	32
spring-boot-starter-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter@2.5.3	Highest	28
spring-boot-starter-actuator-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.3	Highest	28
spring-boot-starter-aop-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.3	Highest	28
spring-boot-starter-data-jpa-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.3	Highest	28
spring-boot-starter-hateoas-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-hateoas@2.5.3	Highest	28
spring-boot-starter-jdbc-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.3	Highest	28
spring-boot-starter-json-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.3	Highest	28
spring-boot-starter-logging-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.3	Highest	28
spring-boot-starter-oauth2-client-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@2.5.3	Highest	28
spring-boot-starter-oauth2-resource-server-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:server:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-resource-server@2.5.3	Highest	28
spring-boot-starter-security-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::* cpe:2.3:a:vmware:spring_security:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-security@2.5.3	Highest	28
spring-boot-starter-tomcat-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.3	Highest	28
spring-boot-starter-web-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_boot:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.3	Highest	28
spring-context-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-context@5.3.9	Highest	29
spring-core-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-core@5.3.9	Highest	31
spring-data-commons-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_data_commons:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.data/spring-data-commons@2.5.3	Highest	30
spring-data-jpa-2.5.3.jar	cpe:2.3:a:pivotal_software:spring_data_jpa:2.5.3:::::::* cpe:2.3:a:vmware:spring_framework:2.5.3:::::::*	pkg:maven/org.springframework.data/spring-data-jpa@2.5.3	Highest	32
spring-expression-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-expression@5.3.9	Highest	31
spring-hateoas-1.3.3.jar	cpe:2.3:a:vmware:spring_framework:1.3.3:::::::*	pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.3	Highest	30
spring-jcl-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-jcl@5.3.9	Highest	29
spring-jdbc-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-jdbc@5.3.9	Highest	29
spring-orm-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-orm@5.3.9	Highest	29
spring-plugin-core-2.0.0.RELEASE.jar	cpe:2.3:a:vmware:spring_framework:2.0.0:release::::::	pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE	Highest	27
spring-security-config-5.5.1.jar	cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-config@5.5.1	Highest	30
spring-security-core-5.5.1.jar	cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-core@5.5.1	Highest	30
spring-security-crypto-5.5.1.jar	cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-crypto@5.5.1	Highest	30
spring-security-jwt-1.1.1.RELEASE.jar	cpe:2.3:a:pivotal_software:spring_security:1.1.1:release:::::: cpe:2.3:a:vmware:spring_framework:1.1.1:release:::::: cpe:2.3:a:vmware:spring_security:1.1.1:release::::::	pkg:maven/org.springframework.security/spring-security-jwt@1.1.1.RELEASE	Highest	32
spring-security-oauth2-2.5.0.RELEASE.jar	cpe:2.3:a:pivotal:spring_security_oauth:2.5.0:release:::::: cpe:2.3:a:vmware:spring_framework:2.5.0:release:::::: cpe:2.3:a:vmware:spring_security:2.5.0:release::::::	pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.5.0.RELEASE	Highest	28
spring-security-oauth2-autoconfigure-2.4.2.jar	cpe:2.3:a:vmware:spring_framework:2.4.2:::::::* cpe:2.3:a:vmware:spring_security:2.4.2:::::::*	pkg:maven/org.springframework.security.oauth.boot/spring-security-oauth2-autoconfigure@2.4.2	Highest	32
spring-security-oauth2-client-5.5.1.jar	cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-oauth2-client@5.5.1	Highest	32
spring-security-oauth2-core-5.5.1.jar	cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-oauth2-core@5.5.1	Highest	32
spring-security-oauth2-jose-5.5.1.jar	cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:vmware:spring_framework:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-oauth2-jose@5.5.1	Highest	32
spring-security-oauth2-resource-server-5.5.1.jar	cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:::::::* cpe:2.3:a:vmware:server:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.5.1	Highest	32
spring-security-web-5.5.1.jar	cpe:2.3:a:pivotal_software:spring_security:5.5.1:::::::* cpe:2.3:a:vmware:spring_security:5.5.1:::::::*	pkg:maven/org.springframework.security/spring-security-web@5.5.1	Highest	30
spring-tx-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-tx@5.3.9	Highest	29
spring-web-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-web@5.3.9	Highest	29
spring-webmvc-5.3.9.jar	cpe:2.3:a:pivotal_software:spring_framework:5.3.9:::::::* cpe:2.3:a:springsource:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:spring_framework:5.3.9:::::::* cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:::::::*	pkg:maven/org.springframework/spring-webmvc@5.3.9	Highest	31
springdoc-openapi-common-1.2.32.jar		pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32		21
springdoc-openapi-ui-1.2.32.jar		pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32		23
springdoc-openapi-webmvc-core-1.2.32.jar		pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32		23
swagger-annotations-2.1.1.jar		pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1		33
swagger-core-2.1.1.jar		pkg:maven/io.swagger.core.v3/swagger-core@2.1.1		33
swagger-integration-2.1.1.jar		pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1		33
swagger-models-2.1.1.jar		pkg:maven/io.swagger.core.v3/swagger-models@2.1.1		33
swagger-ui-3.25.0.jar		pkg:maven/org.webjars/swagger-ui@3.25.0		17
tomcat-annotations-api-9.0.50.jar	cpe:2.3:a:www-sql_project:www-sql:9.0.50:::::::*	pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.50	Low	32
tomcat-embed-core-9.0.50.jar	cpe:2.3:a:apache:tomcat:9.0.50:::::::* cpe:2.3:a:apache_software_foundation:tomcat:9.0.50:::::::* cpe:2.3:a:apache_tomcat:apache_tomcat:9.0.50:::::::*	pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.50	Highest	71
tomcat-embed-el-9.0.50.jar		pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.50		35
tomcat-embed-websocket-9.0.50.jar	cpe:2.3:a:apache:tomcat:9.0.50:::::::* cpe:2.3:a:apache_software_foundation:tomcat:9.0.50:::::::* cpe:2.3:a:apache_tomcat:apache_tomcat:9.0.50:::::::*	pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.50	Highest	42
txw2-2.3.4.jar		pkg:maven/org.glassfish.jaxb/txw2@2.3.4		33
ucp-19.3.0.0.jar	cpe:2.3:a:oracle:oracle_database:19.3.0.0:::::::*	pkg:maven/com.oracle.ojdbc/ucp@19.3.0.0	Low	22
validation-api-2.0.1.Final.jar		pkg:maven/javax.validation/validation-api@2.0.1.Final		23
waffle-jna-1.9.1.jar		pkg:maven/com.github.waffle/waffle-jna@1.9.1		39
webjars-locator-0.38.jar		pkg:maven/org.webjars/webjars-locator@0.38		16
webjars-locator-core-0.46.jar		pkg:maven/org.webjars/webjars-locator-core@0.46		16
zjsonpatch-0.3.0.jar	cpe:2.3:a:oracle:java_se:0.3.0:::::::*	pkg:maven/io.fabric8/zjsonpatch@0.3.0	Low	37

Dependencies

HdrHistogram-2.1.12.jar

Description:

        HdrHistogram supports the recording and analyzing sampled data value
        counts across a configurable integer value range with configurable value
        precision within the range. Value precision is expressed as the number of
        significant digits in the value recording, and provides control over value
        quantization behavior across the value range and the subsequent value
        resolution at any given level.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/
BSD-2-Clause: https://opensource.org/licenses/BSD-2-Clause

File Path: /home/jenkins/.mvnrepository/org/hdrhistogram/HdrHistogram/2.1.12/HdrHistogram-2.1.12.jar
MD5: 4b1acf3448b750cb485da7e37384fcd8
SHA1: 6eb7552156e0d517ae80cc2247be1427c8d90452
SHA256:9b47fbae444feaac4b7e04f0ea294569e4bc282bc69d8c2ce2ac3f23577281e2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.hdrhistogram.HdrHistogram	Medium
Vendor	pom	artifactid	HdrHistogram	Low
Vendor	jar	package name	hdrhistogram	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.hdrhistogram	Medium
Vendor	file	name	HdrHistogram	High
Vendor	pom	url	http://hdrhistogram.github.io/HdrHistogram/	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	groupid	hdrhistogram	Highest
Vendor	pom	groupid	org.hdrhistogram	Highest
Vendor	pom	name	HdrHistogram	High
Product	pom	url	http://hdrhistogram.github.io/HdrHistogram/	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	Bundle-Name	HdrHistogram	Medium
Product	pom	name	HdrHistogram	High
Product	pom	artifactid	HdrHistogram	Highest
Product	Manifest	bundle-symbolicname	org.hdrhistogram.HdrHistogram	Medium
Product	jar	package name	hdrhistogram	Highest
Product	Manifest	specification-title	HdrHistogram	Medium
Product	jar	package name	version	Highest
Product	file	name	HdrHistogram	High
Product	Manifest	Implementation-Title	HdrHistogram	High
Product	pom	groupid	hdrhistogram	Highest
Version	Manifest	Bundle-Version	2.1.12	High
Version	Manifest	Implementation-Version	2.1.12	High
Version	file	version	2.1.12	High
Version	pom	version	2.1.12	Highest

Identifiers

pkg:maven/org.hdrhistogram/HdrHistogram@2.1.12 (Confidence:High)

HikariCP-4.0.3.jar

Description:

Ultimate JDBC Connection Pool

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar
MD5: e725642926105cd1bbf4ad7fdff5d5a9
SHA1: 107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f
SHA256:7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Vendor	pom	groupid	zaxxer	Highest
Vendor	jar	package name	zaxxer	Highest
Vendor	pom	organization name	Zaxxer.com	High
Vendor	pom	name	HikariCP	High
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Vendor	pom	organization url	brettwooldridge	Medium
Vendor	pom	url	brettwooldridge/HikariCP	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	pool	Highest
Vendor	pom	groupid	com.zaxxer	Highest
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	pom	artifactid	HikariCP	Low
Vendor	Manifest	multi-release	true	Low
Vendor	file	name	HikariCP	High
Product	Manifest	bundle-docurl	https://github.com/brettwooldridge	Low
Product	pom	groupid	zaxxer	Highest
Product	Manifest	Bundle-Name	HikariCP	Medium
Product	jar	package name	zaxxer	Highest
Product	pom	artifactid	HikariCP	Highest
Product	pom	url	brettwooldridge	High
Product	pom	name	HikariCP	High
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	bundle-symbolicname	com.zaxxer.HikariCP	Medium
Product	jar	package name	11	Highest
Product	jar	package name	pool	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	pom	organization name	Zaxxer.com	Low
Product	Manifest	multi-release	true	Low
Product	pom	url	brettwooldridge/HikariCP	High
Product	file	name	HikariCP	High
Version	Manifest	Bundle-Version	4.0.3	High
Version	file	version	4.0.3	High
Version	pom	version	4.0.3	Highest

Identifiers

pkg:maven/com.zaxxer/HikariCP@4.0.3 (Confidence:High)

LatencyUtils-2.0.3.jar

Description:

        LatencyUtils is a package that provides latency recording and reporting utilities.

License:

Public Domain, per Creative Commons CC0: http://creativecommons.org/publicdomain/zero/1.0/

File Path: /home/jenkins/.mvnrepository/org/latencyutils/LatencyUtils/2.0.3/LatencyUtils-2.0.3.jar
MD5: 2ad12e1ef7614cecfb0483fa9ac6da73
SHA1: 769c0b82cb2421c8256300e907298a9410a2a3d3
SHA256:a32a9ffa06b2f4e01c5360f8f9df7bc5d9454a5d373cd8f361347fa5a57165ec
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.latencyutils	Highest
Vendor	pom	artifactid	LatencyUtils	Low
Vendor	pom	url	http://latencyutils.github.io/LatencyUtils/	Highest
Vendor	jar	package name	latencyutils	Highest
Vendor	pom	groupid	latencyutils	Highest
Vendor	jar	package name	latencyutils	Low
Vendor	pom	name	LatencyUtils	High
Vendor	file	name	LatencyUtils	High
Product	jar	package name	latencyutils	Highest
Product	pom	groupid	latencyutils	Highest
Product	pom	url	http://latencyutils.github.io/LatencyUtils/	Medium
Product	pom	artifactid	LatencyUtils	Highest
Product	pom	name	LatencyUtils	High
Product	file	name	LatencyUtils	High
Version	pom	version	2.0.3	Highest
Version	file	version	2.0.3	High

Identifiers

pkg:maven/org.latencyutils/LatencyUtils@2.0.3 (Confidence:High)

accessors-smart-2.4.7.jar

Description:

Java reflect give poor performance on getter setter an constructor calls, accessors-smart use ASM to speed up those calls.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/minidev/accessors-smart/2.4.7/accessors-smart-2.4.7.jar
MD5: 53cb6c796eb91346af5edb178c42b39b
SHA1: 3970cfc505e6657ca60f3aa57c849f6043000d7a
SHA256:ef5103429f101f7e3ff62f3a182342720439eaea43d2eed3119bba770bb202a9
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	ASM based accessors helper used by json-smart	High
Vendor	jar	package name	minidev	Highest
Vendor	pom	artifactid	accessors-smart	Low
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	file	name	accessors-smart	High
Vendor	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	pom	url	https://urielch.github.io/	Highest
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	jar	package name	net	Highest
Vendor	pom	groupid	net.minidev	Highest
Vendor	jar	package name	asm	Highest
Product	pom	name	ASM based accessors helper used by json-smart	High
Product	pom	organization url	https://urielch.github.io/	Low
Product	jar	package name	minidev	Highest
Product	file	name	accessors-smart	High
Product	Manifest	bundle-symbolicname	net.minidev.accessors-smart	Medium
Product	Manifest	Bundle-Name	accessors-smart	Medium
Product	pom	url	https://urielch.github.io/	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	pom	artifactid	accessors-smart	Highest
Product	jar	package name	net	Highest
Product	jar	package name	asm	Highest
Product	pom	groupid	net.minidev	Highest
Product	pom	organization name	Chemouni Uriel	Low
Version	pom	version	2.4.7	Highest
Version	file	version	2.4.7	High
Version	Manifest	Bundle-Version	2.4.7	High

Identifiers

pkg:maven/net.minidev/accessors-smart@2.4.7 (Confidence:High)
cpe:2.3:a:json_smart_project:json_smart:2.4.7:*:*:*:*:*:*:* (Confidence:Low)

antlr-2.7.7.jar

Description:

    A framework for constructing recognizers, compilers,
    and translators from grammatical descriptions containing
    Java, C#, C++, or Python actions.

License:

BSD License: http://www.antlr.org/license.html

File Path: /home/jenkins/.mvnrepository/antlr/antlr/2.7.7/antlr-2.7.7.jar
MD5: f8f1352c52a4c6a500b597596501fc64
SHA1: 83cd2cd674a217ade95a4bb83a8a14f351f48bd0
SHA256:88fbda4b912596b9f56e8e12e580cc954bacfb51776ecfddd3e18fc1cf56dc4c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	python	Highest
Vendor	pom	groupid	antlr	Highest
Vendor	pom	name	AntLR Parser Generator	High
Vendor	jar	package name	java	Highest
Vendor	pom	artifactid	antlr	Low
Vendor	jar	package name	antlr	Highest
Vendor	jar	package name	parser	Highest
Vendor	jar	package name	actions	Highest
Vendor	pom	url	http://www.antlr.org/	Highest
Vendor	file	name	antlr	High
Vendor	jar	package name	antlr	Low
Product	jar	package name	python	Highest
Product	pom	groupid	antlr	Highest
Product	pom	name	AntLR Parser Generator	High
Product	jar	package name	java	Highest
Product	jar	package name	antlr	Highest
Product	jar	package name	parser	Highest
Product	jar	package name	actions	Highest
Product	pom	url	http://www.antlr.org/	Medium
Product	file	name	antlr	High
Product	pom	artifactid	antlr	Highest
Version	file	version	2.7.7	High
Version	pom	version	2.7.7	Highest

Identifiers

pkg:maven/antlr/antlr@2.7.7 (Confidence:High)

apiguardian-api-1.1.0.jar

Description:

@API Guardian

License:

The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apiguardian/apiguardian-api/1.1.0/apiguardian-api-1.1.0.jar
MD5: 944805817b648e558ed6be6fc7f054f3
SHA1: fc9dff4bb36d627bdc553de77e1f17efd790876c
SHA256:a9aae9ff8ae3e17a2a18f79175e82b16267c246fbbd3ca9dfbbb290b08dcfdd4
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	apiguardian-api	High
Vendor	Manifest	build-date	2019-06-06	Low
Vendor	jar	package name	api	Highest
Vendor	pom	url	apiguardian-team/apiguardian	Highest
Vendor	pom	artifactid	apiguardian-api	Low
Vendor	Manifest	build-time	21:07:38.516+0200	Low
Vendor	pom	groupid	org.apiguardian	Highest
Vendor	Manifest	build-revision	e7f98b22d3b2a54033711e2666a047d1066b0b25	Low
Vendor	jar	package name	apiguardian	Highest
Vendor	Manifest	Implementation-Vendor	apiguardian.org	High
Vendor	pom	name	org.apiguardian:apiguardian-api	High
Vendor	pom	groupid	apiguardian	Highest
Vendor	Manifest	specification-vendor	apiguardian.org	Low
Product	file	name	apiguardian-api	High
Product	Manifest	build-date	2019-06-06	Low
Product	jar	package name	api	Highest
Product	pom	artifactid	apiguardian-api	Highest
Product	pom	url	apiguardian-team/apiguardian	High
Product	Manifest	specification-title	apiguardian-api	Medium
Product	Manifest	build-time	21:07:38.516+0200	Low
Product	Manifest	build-revision	e7f98b22d3b2a54033711e2666a047d1066b0b25	Low
Product	jar	package name	apiguardian	Highest
Product	Manifest	Implementation-Title	apiguardian-api	High
Product	pom	name	org.apiguardian:apiguardian-api	High
Product	pom	groupid	apiguardian	Highest
Version	Manifest	Implementation-Version	1.1.0	High
Version	pom	version	1.1.0	Highest
Version	file	version	1.1.0	High

Identifiers

pkg:maven/org.apiguardian/apiguardian-api@1.1.0 (Confidence:High)

asm-9.1.jar

Description:

ASM, a very small and fast Java bytecode manipulation framework

License:

BSD-3-Clause: https://asm.ow2.io/license.html

File Path: /home/jenkins/.mvnrepository/org/ow2/asm/asm/9.1/asm-9.1.jar
MD5: 54b9f5d15e4877a4ea4cf9ec48e07afa
SHA1: a99500cf6eea30535eeac6be73899d048f8d12a8
SHA256:cda4de455fab48ff0bcb7c48b4639447d4de859a7afc30a094a986f0936beba2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	asm	High
Vendor	pom	organization url	http://www.ow2.org/	Medium
Vendor	pom	groupid	ow2.asm	Highest
Vendor	pom	artifactid	asm	Low
Vendor	jar	package name	objectweb	Highest
Vendor	pom	name	asm	High
Vendor	pom	groupid	org.ow2.asm	Highest
Vendor	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Vendor	pom	parent-groupid	org.ow2	Medium
Vendor	pom	organization name	OW2	High
Vendor	Manifest	bundle-docurl	http://asm.ow2.org	Low
Vendor	pom	parent-artifactid	ow2	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	jar	package name	asm	Highest
Vendor	pom	url	http://asm.ow2.io/	Highest
Product	file	name	asm	High
Product	pom	groupid	ow2.asm	Highest
Product	pom	organization url	http://www.ow2.org/	Low
Product	Manifest	Implementation-Title	ASM, a very small and fast Java bytecode manipulation framework	High
Product	Manifest	Bundle-Name	org.objectweb.asm	Medium
Product	pom	url	http://asm.ow2.io/	Medium
Product	pom	parent-artifactid	ow2	Medium
Product	jar	package name	objectweb	Highest
Product	pom	name	asm	High
Product	Manifest	bundle-symbolicname	org.objectweb.asm	Medium
Product	pom	parent-groupid	org.ow2	Medium
Product	pom	artifactid	asm	Highest
Product	Manifest	bundle-docurl	http://asm.ow2.org	Low
Product	pom	organization name	OW2	Low
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	jar	package name	asm	Highest
Version	file	version	9.1	High
Version	pom	parent-version	9.1	Low
Version	pom	version	9.1	Highest
Version	Manifest	Implementation-Version	9.1	High

Identifiers

pkg:maven/org.ow2.asm/asm@9.1 (Confidence:High)

aspectjweaver-1.9.7.jar

Description:

The AspectJ weaver applies aspects to Java classes. It can be used as a Java agent in order to apply load-time
		weaving (LTW) during class-loading and also contains the AspectJ runtime classes.

License:

Eclipse Public License - v 2.0: https://www.eclipse.org/org/documents/epl-2.0/EPL-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/aspectj/aspectjweaver/1.9.7/aspectjweaver-1.9.7.jar
MD5: a4d97c5a2f94b8b5d132761a769e5eeb
SHA1: 158f5c255cd3e4408e795b79f7c3fbae9b53b7ca
SHA256:1b448d82bd0f8a8c1842506e6c7edb95ff1a1275ce39f766e7884122b866fe5d
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	org.aspectj.weaver	Medium
Vendor	jar	package name	aspects	Highest
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	jar	package name	ltw	Highest
Vendor	jar	package name	org	Highest
Vendor	pom	artifactid	aspectjweaver	Low
Vendor	file	name	aspectjweaver	High
Vendor	pom	groupid	aspectj	Highest
Vendor	jar	package name	and	Highest
Vendor	pom	url	https://www.eclipse.org/aspectj/	Highest
Vendor	jar	package name	weaver	Highest
Vendor	manifest: org/aspectj/weaver/	Implementation-Vendor	https://www.eclipse.org/aspectj/	Medium
Vendor	pom	groupid	org.aspectj	Highest
Vendor	pom	name	AspectJ Weaver	High
Vendor	jar	package name	aspectj	Highest
Vendor	jar	package name	runtime	Highest
Vendor	jar	package name	agent	Highest
Product	Manifest	automatic-module-name	org.aspectj.weaver	Medium
Product	jar	package name	aspects	Highest
Product	Manifest	can-redefine-classes	true	Low
Product	manifest: org/aspectj/weaver/	Specification-Title	AspectJ Weaver Classes	Medium
Product	pom	artifactid	aspectjweaver	Highest
Product	jar	package name	ltw	Highest
Product	jar	package name	org	Highest
Product	manifest: org/aspectj/weaver/	Implementation-Title	org.aspectj.weaver	Medium
Product	file	name	aspectjweaver	High
Product	pom	url	https://www.eclipse.org/aspectj/	Medium
Product	pom	groupid	aspectj	Highest
Product	jar	package name	and	Highest
Product	jar	package name	weaver	Highest
Product	pom	name	AspectJ Weaver	High
Product	jar	package name	aspectj	Highest
Product	jar	package name	runtime	Highest
Product	jar	package name	agent	Highest
Version	pom	version	1.9.7	Highest
Version	file	version	1.9.7	High
Version	manifest: org/aspectj/weaver/	Implementation-Version	1.9.7	Medium

Identifiers

pkg:maven/org.aspectj/aspectjweaver@1.9.7 (Confidence:High)

automaton-1.11-8.jar

Description:

A DFA/NFA (finite-state automata) implementation with
		Unicode alphabet (UTF16) and support for the standard regular
		expression operations (concatenation, union, Kleene star) and a number
		of non-standard ones (intersection, complement, etc.)

License:

BSD: http://www.opensource.org/licenses/bsd-license.php

File Path: /home/jenkins/.mvnrepository/dk/brics/automaton/automaton/1.11-8/automaton-1.11-8.jar
MD5: 3467dcbbba2fe68a4e07a5826988e034
SHA1: 6ebfa65eb431ff4b715a23be7a750cbc4cc96d0f
SHA256:a24475f6ccfe1cc7a4fe9e34e05ce687b0ce0c6e8cb781e0eced3b186482c61e
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	brics	Low
Vendor	pom	groupid	dk.brics.automaton	Highest
Vendor	jar	package name	automaton	Highest
Vendor	jar	package name	state	Highest
Vendor	jar	package name	automaton	Low
Vendor	pom	artifactid	automaton	Low
Vendor	jar	package name	brics	Highest
Vendor	file	name	automaton	High
Vendor	pom	url	http://www.brics.dk/automaton/	Highest
Vendor	jar	package name	dk	Highest
Vendor	jar	package name	dk	Low
Vendor	pom	name	Automaton	High
Product	jar	package name	brics	Low
Product	file	name	automaton	High
Product	pom	groupid	dk.brics.automaton	Highest
Product	jar	package name	automaton	Highest
Product	jar	package name	state	Highest
Product	pom	artifactid	automaton	Highest
Product	jar	package name	automaton	Low
Product	pom	url	http://www.brics.dk/automaton/	Medium
Product	jar	package name	dk	Highest
Product	jar	package name	brics	Highest
Product	pom	name	Automaton	High
Version	pom	version	1.11-8	Highest

Identifiers

pkg:maven/dk.brics.automaton/automaton@1.11-8 (Confidence:High)

awaitility-4.0.1.jar

Description:

A Java DSL for synchronizing asynchronous operations

License:

LICENSE.txt

File Path: /home/jenkins/.mvnrepository/org/awaitility/awaitility/4.0.1/awaitility-4.0.1.jar
MD5: 9f8f697377751b4dbf53f377bda2dcce
SHA1: b1b83c03c9d58c8b1aaf116b1e5365fa2ed2b572
SHA256:b6660aa2fdbda01570713894dae0b5cb1688012ad7af1ad8a6c03b42ef6d3d08
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	awaitility	Low
Vendor	jar	package name	awaitility	Highest
Vendor	Manifest	bundle-symbolicname	org.awaitility	Medium
Vendor	pom	parent-groupid	org.awaitility	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	Awaitility	High
Vendor	pom	groupid	org.awaitility	Highest
Vendor	file	name	awaitility	High
Vendor	pom	parent-artifactid	awaitility-parent	Low
Vendor	pom	groupid	awaitility	Highest
Vendor	pom	url	http://awaitility.org	Highest
Product	jar	package name	awaitility	Highest
Product	pom	artifactid	awaitility	Highest
Product	Manifest	bundle-symbolicname	org.awaitility	Medium
Product	pom	parent-groupid	org.awaitility	Medium
Product	pom	url	http://awaitility.org	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-artifactid	awaitility-parent	Medium
Product	pom	name	Awaitility	High
Product	file	name	awaitility	High
Product	Manifest	Bundle-Name	Awaitility	Medium
Product	pom	groupid	awaitility	Highest
Version	file	version	4.0.1	High
Version	Manifest	Bundle-Version	4.0.1	High
Version	pom	version	4.0.1	Highest

Identifiers

pkg:maven/org.awaitility/awaitility@4.0.1 (Confidence:High)

bcpkix-jdk15on-1.64.jar

Description:

The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.5 to JDK 11. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs.

License:

Bouncy Castle Licence: https://www.bouncycastle.org/licence.html

File Path: /home/jenkins/.mvnrepository/org/bouncycastle/bcpkix-jdk15on/1.64/bcpkix-jdk15on-1.64.jar
MD5: ac323fe2770d772e94bb7bc3249904e5
SHA1: 3dac163e20110817d850d17e0444852a6d7d0bd7
SHA256:84669138b1d99143e2c009024f67824ab8d3edb9b05b7591f5ebfb020a4bda71
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	BouncyCastle.org	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	application-name	Bouncy Castle PKIX API	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.bouncycastle	Medium
Vendor	Manifest	Implementation-Vendor	BouncyCastle.org	High
Vendor	jar	package name	tsp	Highest
Vendor	pom	url	https://www.bouncycastle.org/java.html	Highest
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	jar	package name	cms	Highest
Vendor	Manifest	extension-name	org.bouncycastle.bcpkix	Medium
Vendor	Manifest	automatic-module-name	org.bouncycastle.pkix	Medium
Vendor	pom	groupid	bouncycastle	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	trusted-library	true	Low
Vendor	Manifest	originally-created-by	25.222-b10 (Private Build)	Low
Vendor	Manifest	bundle-symbolicname	bcpkix	Medium
Vendor	pom	artifactid	bcpkix-jdk15on	Low
Vendor	jar	package name	bouncycastle	Highest
Vendor	jar	package name	pkix	Highest
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	jar	package name	cmp	Highest
Vendor	jar	package name	crmf	Highest
Vendor	pom	groupid	org.bouncycastle	Highest
Vendor	jar	package name	ocsp	Highest
Vendor	pom	name	Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs	High
Vendor	jar	package name	eac	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	file	name	bcpkix-jdk15on	High
Vendor	Manifest	permissions	all-permissions	Low
Vendor	jar	package name	pkcs	Highest
Product	Manifest	codebase	*	Low
Product	Manifest	application-name	Bouncy Castle PKIX API	Medium
Product	pom	artifactid	bcpkix-jdk15on	Highest
Product	jar	package name	tsp	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	jar	package name	cms	Highest
Product	Manifest	Bundle-Name	bcpkix	Medium
Product	Manifest	extension-name	org.bouncycastle.bcpkix	Medium
Product	Manifest	automatic-module-name	org.bouncycastle.pkix	Medium
Product	pom	groupid	bouncycastle	Highest
Product	Manifest	multi-release	true	Low
Product	Manifest	trusted-library	true	Low
Product	Manifest	originally-created-by	25.222-b10 (Private Build)	Low
Product	Manifest	bundle-symbolicname	bcpkix	Medium
Product	jar	package name	bouncycastle	Highest
Product	jar	package name	pkix	Highest
Product	Manifest	caller-allowable-codebase	*	Low
Product	jar	package name	cmp	Highest
Product	jar	package name	crmf	Highest
Product	jar	package name	ocsp	Highest
Product	pom	name	Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs	High
Product	jar	package name	eac	Highest
Product	pom	url	https://www.bouncycastle.org/java.html	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	bcpkix-jdk15on	High
Product	Manifest	permissions	all-permissions	Low
Product	jar	package name	pkcs	Highest
Version	file	version	1.64	High
Version	pom	version	1.64	Highest
Version	Manifest	Bundle-Version	1.64	High

Identifiers

pkg:maven/org.bouncycastle/bcpkix-jdk15on@1.64 (Confidence:High)

bcprov-jdk15on-1.64.jar

Description:

The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for Java 5 to Java 11.

License:

Bouncy Castle Licence: https://www.bouncycastle.org/licence.html

File Path: /home/jenkins/.mvnrepository/org/bouncycastle/bcprov-jdk15on/1.64/bcprov-jdk15on-1.64.jar
MD5: 1d172df000184d005b49bc6d30892a05
SHA1: 1467dac1b787b5ad2a18201c0c281df69882259e
SHA256:a4f463ce552b908a722fa198ef4892a226b3225e453f8df10d5c0a5bfe5db6b6
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	BouncyCastle.org	Low
Vendor	Manifest	codebase	*	Low
Vendor	Manifest	Implementation-Vendor-Id	org.bouncycastle	Medium
Vendor	Manifest	Implementation-Vendor	BouncyCastle.org	High
Vendor	jar	package name	provider	Highest
Vendor	pom	url	https://www.bouncycastle.org/java.html	Highest
Vendor	Manifest	application-library-allowable-codebase	*	Low
Vendor	Manifest	application-name	Bouncy Castle Provider	Medium
Vendor	Manifest	extension-name	org.bouncycastle.bcprovider	Medium
Vendor	pom	groupid	bouncycastle	Highest
Vendor	pom	name	Bouncy Castle Provider	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	trusted-library	true	Low
Vendor	Manifest	originally-created-by	25.222-b10 (Private Build)	Low
Vendor	Manifest	automatic-module-name	org.bouncycastle.provider	Medium
Vendor	file	name	bcprov-jdk15on	High
Vendor	jar	package name	bouncycastle	Highest
Vendor	jar	package name	jce	Highest
Vendor	Manifest	caller-allowable-codebase	*	Low
Vendor	pom	artifactid	bcprov-jdk15on	Low
Vendor	pom	groupid	org.bouncycastle	Highest
Vendor	jar	package name	crypto	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	Manifest	bundle-symbolicname	bcprov	Medium
Vendor	Manifest	permissions	all-permissions	Low
Product	Manifest	trusted-library	true	Low
Product	Manifest	originally-created-by	25.222-b10 (Private Build)	Low
Product	Manifest	codebase	*	Low
Product	Manifest	Bundle-Name	bcprov	Medium
Product	Manifest	automatic-module-name	org.bouncycastle.provider	Medium
Product	file	name	bcprov-jdk15on	High
Product	hint analyzer	product	legion-of-the-bouncy-castle-java-crytography-api	High
Product	jar	package name	bouncycastle	Highest
Product	jar	package name	jce	Highest
Product	Manifest	caller-allowable-codebase	*	Low
Product	jar	package name	provider	Highest
Product	Manifest	application-library-allowable-codebase	*	Low
Product	Manifest	application-name	Bouncy Castle Provider	Medium
Product	Manifest	extension-name	org.bouncycastle.bcprovider	Medium
Product	pom	artifactid	bcprov-jdk15on	Highest
Product	jar	package name	crypto	Highest
Product	pom	url	https://www.bouncycastle.org/java.html	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	pom	groupid	bouncycastle	Highest
Product	pom	name	Bouncy Castle Provider	High
Product	Manifest	bundle-symbolicname	bcprov	Medium
Product	Manifest	multi-release	true	Low
Product	Manifest	permissions	all-permissions	Low
Version	file	version	1.64	High
Version	pom	version	1.64	Highest
Version	Manifest	Bundle-Version	1.64	High

Identifiers

pkg:maven/org.bouncycastle/bcprov-jdk15on@1.64 (Confidence:High)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle:1.64:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:bouncycastle:legion-of-the-bouncy-castle-java-crytography-api:1.64:*:*:*:*:*:*:* (Confidence:Low)

byte-buddy-1.9.16.jar

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/bytebuddy/byte-buddy/1.9.16/byte-buddy-1.9.16.jar
MD5: 5f70996f05d320703b4a8ebd2657dcdd
SHA1: e7d63009be7b87ff1f15b72e5b8c59c897a8d8bd
SHA256:6b71e4f70c96b67d420f592148aa4fd1966aba458b35d11f491ff13de97dc862
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	file	name	byte-buddy	High
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Vendor	jar	package name	bytebuddy	Highest
Vendor	pom	artifactid	byte-buddy	Low
Vendor	jar	package name	build	Highest
Vendor	jar	package name	net	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	pom	name	Byte Buddy (without dependencies)	High
Vendor	jar	package name	asm	Highest
Product	file	name	byte-buddy	High
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Product	jar	package name	bytebuddy	Highest
Product	jar	package name	build	Highest
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy	Medium
Product	pom	artifactid	byte-buddy	Highest
Product	Manifest	Bundle-Name	Byte Buddy (without dependencies)	Medium
Product	jar	package name	net	Highest
Product	Manifest	multi-release	true	Low
Product	jar	package name	asm	Highest
Product	pom	name	Byte Buddy (without dependencies)	High
Version	Manifest	Bundle-Version	1.9.16	High
Version	pom	version	1.9.16	Highest
Version	file	version	1.9.16	High

Identifiers

pkg:maven/net.bytebuddy/byte-buddy@1.9.16 (Confidence:High)

byte-buddy-1.9.16.jar (shaded: net.bytebuddy:byte-buddy-dep:1.9.16)

Description:

        Byte Buddy is a Java library for creating Java classes at run time.
        This artifact is a build of Byte Buddy with a remaining dependency onto ASM.
        You should never depend on this module without repackaging Byte Buddy and ASM into your own namespace.

File Path: /home/jenkins/.mvnrepository/net/bytebuddy/byte-buddy/1.9.16/byte-buddy-1.9.16.jar/META-INF/maven/net.bytebuddy/byte-buddy-dep/pom.xml
MD5: 075a226f7deb87c6dee195c79fadf984
SHA1: 5d488c03efcaee9285f5bb1d51200beddc8e2235
SHA256:594d3dae331688e9fd5b0606bbc69a9f021961baa853d83b17af7e0f862ee31d
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	byte-buddy-dep	Low
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Vendor	pom	name	Byte Buddy (with dependencies)	High
Vendor	pom	groupid	net.bytebuddy	Highest
Product	pom	name	Byte Buddy (with dependencies)	High
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Product	pom	artifactid	byte-buddy-dep	Highest
Version	pom	version	1.9.16	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy-dep@1.9.16 (Confidence:High)

byte-buddy-agent-1.10.22.jar

Description:

The Byte Buddy agent offers convenience for attaching an agent to the local or a remote VM.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/bytebuddy/byte-buddy-agent/1.10.22/byte-buddy-agent-1.10.22.jar
MD5: 822e73efe0527a22e71b6f68adf55576
SHA1: b01df6b71a882b9fde5a608a26e641cd399a4d83
SHA256:a3238c0495e9a22c79c3528fc6e767f349f92265c23923d8555f49a41ac033c5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Byte Buddy agent	High
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	pom	parent-artifactid	byte-buddy-parent	Low
Vendor	pom	groupid	net.bytebuddy	Highest
Vendor	jar	package name	bytebuddy	Highest
Vendor	Manifest	can-retransform-classes	true	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Vendor	Manifest	can-set-native-method-prefix	true	Low
Vendor	pom	artifactid	byte-buddy-agent	Low
Vendor	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Vendor	file	name	byte-buddy-agent	High
Vendor	jar	package name	net	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	jar	package name	agent	Highest
Product	pom	name	Byte Buddy agent	High
Product	Manifest	can-redefine-classes	true	Low
Product	pom	groupid	net.bytebuddy	Highest
Product	pom	parent-artifactid	byte-buddy-parent	Medium
Product	jar	package name	bytebuddy	Highest
Product	Manifest	can-retransform-classes	true	Low
Product	pom	artifactid	byte-buddy-agent	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.5))"	Low
Product	Manifest	can-set-native-method-prefix	true	Low
Product	Manifest	bundle-symbolicname	net.bytebuddy.byte-buddy-agent	Medium
Product	Manifest	Bundle-Name	Byte Buddy agent	Medium
Product	file	name	byte-buddy-agent	High
Product	jar	package name	net	Highest
Product	Manifest	multi-release	true	Low
Product	jar	package name	agent	Highest
Version	Manifest	Bundle-Version	1.10.22	High
Version	file	version	1.10.22	High
Version	pom	version	1.10.22	Highest

Identifiers

pkg:maven/net.bytebuddy/byte-buddy-agent@1.10.22 (Confidence:High)

byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll

File Path: /home/jenkins/.mvnrepository/net/bytebuddy/byte-buddy-agent/1.10.22/byte-buddy-agent-1.10.22.jar/win32-x86/attach_hotspot_windows.dll
MD5: fbca33102ac97be0ed496c0f78e466b3
SHA1: c4df05146a86a6d073769bb697d550ef42518ed5
SHA256:810f94c4a2f5ca1a072c19859f7954fed9aa3a1dcb0d601e92d2338793202e72
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll

File Path: /home/jenkins/.mvnrepository/net/bytebuddy/byte-buddy-agent/1.10.22/byte-buddy-agent-1.10.22.jar/win32-x86-64/attach_hotspot_windows.dll
MD5: 053a783e5777c6a9867c27d51af89677
SHA1: 5ef4d98ae6a033a5707d0b5466e6138beb337e76
SHA256:16d424423f9b09accf132ad35dbeaa52ac9f6bd45bba1406b89df851f651db20
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	attach_hotspot_windows	High
Product	file	name	attach_hotspot_windows	High

Identifiers

None

caffeine-2.9.2.jar

Description:

A high performance caching library

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/github/ben-manes/caffeine/caffeine/2.9.2/caffeine-2.9.2.jar
MD5: 7aa86dc0c185691ebfedf507cd02f0bf
SHA1: 0a17ed335e0ce2d337750772c0709b79af35a842
SHA256:ff0245864c6d38c2129981b5f0efc8146057fe4a55497c2345aeded46a2513b9
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Caffeine cache	High
Vendor	pom	url	ben-manes/caffeine	Highest
Vendor	jar	package name	caffeine	Highest
Vendor	jar	package name	github	Highest
Vendor	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Vendor	jar	package name	benmanes	Highest
Vendor	file	name	caffeine	High
Vendor	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	cache	Highest
Vendor	pom	groupid	github.ben-manes.caffeine	Highest
Vendor	pom	groupid	com.github.ben-manes.caffeine	Highest
Vendor	pom	artifactid	caffeine	Low
Product	pom	name	Caffeine cache	High
Product	pom	url	ben-manes/caffeine	High
Product	pom	artifactid	caffeine	Highest
Product	jar	package name	caffeine	Highest
Product	jar	package name	github	Highest
Product	Manifest	automatic-module-name	com.github.benmanes.caffeine	Medium
Product	jar	package name	benmanes	Highest
Product	file	name	caffeine	High
Product	Manifest	bundle-symbolicname	com.github.ben-manes.caffeine	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	cache	Highest
Product	pom	groupid	github.ben-manes.caffeine	Highest
Product	Manifest	Bundle-Name	com.github.ben-manes.caffeine	Medium
Version	Manifest	Bundle-Version	2.9.2	High
Version	file	version	2.9.2	High
Version	pom	version	2.9.2	Highest

Identifiers

pkg:maven/com.github.ben-manes.caffeine/caffeine@2.9.2 (Confidence:High)

checker-qual-3.10.0.jar

Description:

checker-qual contains annotations (type qualifiers)
used by the Checker Framework to type-check Java source code.

Please see artifact: org.checkerframework:checker

License:

The MIT License: http://opensource.org/licenses/MIT

File Path: /home/jenkins/.mvnrepository/org/checkerframework/checker-qual/3.10.0/checker-qual-3.10.0.jar
MD5: d7e964cf19235ee401c48383306aec86
SHA1: 710fd6abff4b26b40dc0917050dc4c67efcf60b6
SHA256:a4dc882ca6aac496d33381e5e5eb0604c45483b004bc3eac9368f1bb17cb2512
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	checker-qual	High
Vendor	jar	package name	checkerframework	Highest
Vendor	jar	package name	checker	Highest
Vendor	pom	groupid	org.checkerframework	Highest
Vendor	Manifest	bundle-symbolicname	checker-qual	Medium
Vendor	pom	artifactid	checker-qual	Low
Vendor	jar	package name	framework	Highest
Vendor	pom	groupid	checkerframework	Highest
Vendor	pom	url	https://checkerframework.org	Highest
Vendor	jar	package name	qual	Highest
Vendor	Manifest	implementation-url	https://checkerframework.org	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Vendor	pom	name	Checker Qual	High
Product	file	name	checker-qual	High
Product	jar	package name	checkerframework	Highest
Product	jar	package name	checker	Highest
Product	Manifest	bundle-symbolicname	checker-qual	Medium
Product	jar	package name	framework	Highest
Product	pom	groupid	checkerframework	Highest
Product	Manifest	Bundle-Name	checker-qual	Medium
Product	jar	package name	qual	Highest
Product	Manifest	implementation-url	https://checkerframework.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	checker-qual	Highest
Product	Manifest	automatic-module-name	org.checkerframework.checker.qual	Medium
Product	pom	url	https://checkerframework.org	Medium
Product	pom	name	Checker Qual	High
Version	Manifest	Bundle-Version	3.10.0	High
Version	Manifest	Implementation-Version	3.10.0	High
Version	file	version	3.10.0	High
Version	pom	version	3.10.0	Highest

Identifiers

pkg:maven/org.checkerframework/checker-qual@3.10.0 (Confidence:High)

classgraph-4.8.44.jar

Description:

The uber-fast, ultra-lightweight classpath and module scanner for JVM languages.

License:

The MIT License (MIT): http://opensource.org/licenses/MIT

File Path: /home/jenkins/.mvnrepository/io/github/classgraph/classgraph/4.8.44/classgraph-4.8.44.jar
MD5: bfa81305f4fc016325b5ce8ab3f15bf3
SHA1: 52f4c19484041e8857f444985b7b8f8a9783da56
SHA256:c4b213084ca1f4bf88484a5fe3d53cc46b9b6c17ebec74be30abdfd4f1c43790
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	classgraph	Highest
Vendor	pom	artifactid	classgraph	Low
Vendor	Manifest	Implementation-Vendor-Id	io.github.classgraph	Medium
Vendor	Manifest	bundle-symbolicname	io.github.classgraph.classgraph	Medium
Vendor	Manifest	bundle-category	Utilities	Low
Vendor	jar	package name	io	Highest
Vendor	jar	package name	scanner	Highest
Vendor	pom	url	classgraph/classgraph	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	github	Highest
Vendor	pom	name	ClassGraph	High
Vendor	pom	groupid	io.github.classgraph	Highest
Vendor	file	name	classgraph	High
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	implementation-url	https://github.com/classgraph/classgraph	Low
Product	jar	package name	classgraph	Highest
Product	Manifest	bundle-symbolicname	io.github.classgraph.classgraph	Medium
Product	pom	artifactid	classgraph	Highest
Product	Manifest	bundle-category	Utilities	Low
Product	jar	package name	scanner	Highest
Product	jar	package name	io	Highest
Product	Manifest	specification-title	ClassGraph	Medium
Product	pom	url	classgraph/classgraph	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	Bundle-Name	ClassGraph	Medium
Product	jar	package name	github	Highest
Product	pom	name	ClassGraph	High
Product	Manifest	Implementation-Title	ClassGraph	High
Product	file	name	classgraph	High
Product	Manifest	multi-release	true	Low
Product	pom	groupid	io.github.classgraph	Highest
Product	Manifest	implementation-url	https://github.com/classgraph/classgraph	Low
Version	pom	version	4.8.44	Highest
Version	file	version	4.8.44	High
Version	Manifest	Implementation-Version	4.8.44	High
Version	Manifest	Bundle-Version	4.8.44	High

Identifiers

pkg:maven/io.github.classgraph/classgraph@4.8.44 (Confidence:High)

classmate-1.5.1.jar

Description:

Library for introspecting types with full generic information
        including resolving of field and method types.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/classmate/1.5.1/classmate-1.5.1.jar
MD5: e91fcd30ba329fd1b0b6dc5321fd067c
SHA1: 3fe0bed568c62df5e89f4f174c101eab25345b6c
SHA256:aab4de3006808c09d25dd4ff4a3611cfb63c95463cfd99e73d2e1680d229a33b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	parent-groupid	com.fasterxml	Medium
Vendor	pom	artifactid	classmate	Low
Vendor	Manifest	specification-vendor	fasterxml.com	Low
Vendor	jar	package name	classmate	Highest
Vendor	pom	groupid	com.fasterxml	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	file	name	classmate	High
Vendor	Manifest	implementation-build-date	2019-10-19 22:46:35+0000	Low
Vendor	pom	url	FasterXML/java-classmate	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml	Medium
Vendor	pom	groupid	fasterxml	Highest
Vendor	pom	organization url	https://fasterxml.com	Medium
Vendor	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Vendor	jar	package name	types	Highest
Vendor	pom	parent-artifactid	oss-parent	Low
Vendor	pom	organization name	fasterxml.com	High
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/java-classmate	Low
Vendor	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Vendor	Manifest	Implementation-Vendor	fasterxml.com	High
Vendor	pom	name	ClassMate	High
Product	jar	package name	fasterxml	Highest
Product	jar	package name	filter	Highest
Product	Manifest	specification-title	ClassMate	Medium
Product	pom	parent-groupid	com.fasterxml	Medium
Product	pom	artifactid	classmate	Highest
Product	jar	package name	classmate	Highest
Product	Manifest	Implementation-Title	ClassMate	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	file	name	classmate	High
Product	Manifest	implementation-build-date	2019-10-19 22:46:35+0000	Low
Product	pom	groupid	fasterxml	Highest
Product	pom	organization url	https://fasterxml.com	Low
Product	pom	organization name	fasterxml.com	Low
Product	jar	package name	types	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.classmate	Medium
Product	pom	url	FasterXML/java-classmate	High
Product	Manifest	bundle-docurl	https://github.com/FasterXML/java-classmate	Low
Product	Manifest	automatic-module-name	com.fasterxml.classmate	Medium
Product	Manifest	Bundle-Name	ClassMate	Medium
Product	pom	parent-artifactid	oss-parent	Medium
Product	pom	name	ClassMate	High
Version	pom	version	1.5.1	Highest
Version	Manifest	Bundle-Version	1.5.1	High
Version	Manifest	Implementation-Version	1.5.1	High
Version	file	version	1.5.1	High
Version	pom	parent-version	1.5.1	Low

Identifiers

pkg:maven/com.fasterxml/classmate@1.5.1 (Confidence:High)

commons-codec-1.15.jar

Description:

     The Apache Commons Codec package contains simple encoder and decoders for
     various formats such as Base64 and Hexadecimal.  In addition to these
     widely used encoders and decoders, the codec package also maintains a
     collection of phonetic encoding utilities.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/commons-codec/commons-codec/1.15/commons-codec-1.15.jar
MD5: 303baf002ce6d382198090aedd9d79a2
SHA1: 49d94806b6e3dc933dacbd8acb0fdbab8ebd1e5d
SHA256:b3e9f6d63a790109bf0d056611fbed1cf69055826defeb9894a71369d246ed63
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	commons-codec	Low
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	name	Apache Commons Codec	High
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	codec	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	apache	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Vendor	jar	package name	encoder	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	pom	groupid	commons-codec	Highest
Vendor	file	name	commons-codec	High
Vendor	jar	package name	commons	Highest
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-codec/	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	name	Apache Commons Codec	High
Product	pom	artifactid	commons-codec	Highest
Product	jar	package name	codec	Highest
Product	pom	url	https://commons.apache.org/proper/commons-codec/	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	apache	Highest
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-codec	Medium
Product	jar	package name	encoder	Highest
Product	Manifest	Bundle-Name	Apache Commons Codec	Medium
Product	Manifest	automatic-module-name	org.apache.commons.codec	Medium
Product	pom	groupid	commons-codec	Highest
Product	pom	parent-artifactid	commons-parent	Medium
Product	file	name	commons-codec	High
Product	Manifest	Implementation-Title	Apache Commons Codec	High
Product	jar	package name	commons	Highest
Product	Manifest	specification-title	Apache Commons Codec	Medium
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-codec/	Low
Version	Manifest	Implementation-Version	1.15	High
Version	pom	parent-version	1.15	Low
Version	file	version	1.15	High
Version	pom	version	1.15	Highest

Identifiers

pkg:maven/commons-codec/commons-codec@1.15 (Confidence:High)

commons-collections4-4.4.jar

Description:

The Apache Commons Collections package contains types that extend and augment the Java Collections Framework.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/commons/commons-collections4/4.4/commons-collections4-4.4.jar
MD5: 4a37023740719b391f10030362c86be6
SHA1: 62ebe7544cb7164d87e0637a2a6a2bdc981395e8
SHA256:1df8b9430b5c8ed143d7815e403e33ef5371b2400aadbe9bda0883762e0846d1
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-collections4	Medium
Vendor	jar	package name	collections4	Highest
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	artifactid	commons-collections4	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-collections/	Highest
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	implementation-url	https://commons.apache.org/proper/commons-collections/	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	automatic-module-name	org.apache.commons.collections4	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	file	name	commons-collections4	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache.commons	Medium
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-collections/	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	commons	Highest
Vendor	pom	name	Apache Commons Collections	High
Product	pom	url	https://commons.apache.org/proper/commons-collections/	Medium
Product	pom	parent-groupid	org.apache.commons	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-collections4	Medium
Product	jar	package name	collections4	Highest
Product	Manifest	Implementation-Title	Apache Commons Collections	High
Product	Manifest	specification-title	Apache Commons Collections	Medium
Product	Manifest	implementation-url	https://commons.apache.org/proper/commons-collections/	Low
Product	pom	artifactid	commons-collections4	Highest
Product	pom	groupid	apache.commons	Highest
Product	jar	package name	apache	Highest
Product	Manifest	automatic-module-name	org.apache.commons.collections4	Medium
Product	file	name	commons-collections4	High
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-collections/	Low
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	Apache Commons Collections	Medium
Product	jar	package name	commons	Highest
Product	pom	name	Apache Commons Collections	High
Version	pom	version	4.4	Highest
Version	Manifest	Implementation-Version	4.4	High
Version	file	version	4.4	High
Version	pom	parent-version	4.4	Low

Identifiers

pkg:maven/org.apache.commons/commons-collections4@4.4 (Confidence:High)
cpe:2.3:a:apache:commons_collections:4.4:*:*:*:*:*:*:* (Confidence:Highest)

commons-compress-1.21.jar

Description:

Apache Commons Compress software defines an API for working with
compression and archive formats.  These include: bzip2, gzip, pack200,
lzma, xz, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/commons/commons-compress/1.21/commons-compress-1.21.jar
MD5: 2a713d10331bc4e13459a3dc0463f16f
SHA1: 4ec95b60d4e86b5c95a0e919cb172a0af98011ef
SHA256:6aecfd5459728a595601cfa07258d131972ffc39b492eb48bdd596577a2f244a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-compress/	Low
Vendor	Manifest	automatic-module-name	org.apache.commons.compress	Medium
Vendor	pom	name	Apache Commons Compress	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	file	name	commons-compress	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-compress	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	groupid	apache.commons	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	extension-name	org.apache.commons.compress	Medium
Vendor	pom	artifactid	commons-compress	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-compress/	Highest
Vendor	jar	package name	compress	Highest
Vendor	Manifest	implementation-build	UNKNOWN@r60e3d9f6bef1e431f8738e881c051d706f81e6cf; 2021-07-09 16:56:00+0000	Low
Vendor	jar	package name	commons	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-compress/	Low
Product	Manifest	automatic-module-name	org.apache.commons.compress	Medium
Product	pom	name	Apache Commons Compress	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	file	name	commons-compress	High
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-compress	Medium
Product	pom	groupid	apache.commons	Highest
Product	jar	package name	apache	Highest
Product	Manifest	extension-name	org.apache.commons.compress	Medium
Product	pom	artifactid	commons-compress	Highest
Product	Manifest	specification-title	Apache Commons Compress	Medium
Product	pom	url	https://commons.apache.org/proper/commons-compress/	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	Apache Commons Compress	Medium
Product	jar	package name	compress	Highest
Product	Manifest	implementation-build	UNKNOWN@r60e3d9f6bef1e431f8738e881c051d706f81e6cf; 2021-07-09 16:56:00+0000	Low
Product	jar	package name	commons	Highest
Product	Manifest	Implementation-Title	Apache Commons Compress	High
Version	file	version	1.21	High
Version	pom	version	1.21	Highest
Version	Manifest	Implementation-Version	1.21	High
Version	pom	parent-version	1.21	Low

Identifiers

pkg:maven/org.apache.commons/commons-compress@1.21 (Confidence:High)
cpe:2.3:a:apache:commons-compress:1.21:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache:commons_compress:1.21:*:*:*:*:*:*:* (Confidence:Highest)

commons-io-2.8.0.jar

Description:

The Apache Commons IO library contains utility classes, stream implementations, file filters,
file comparators, endian transformation classes, and much more.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/commons-io/commons-io/2.8.0/commons-io-2.8.0.jar
MD5: 21ba575792e2694c39af13918a80550b
SHA1: 92999e26e6534606b5678014e66948286298a35c
SHA256:02f291e5d1243dc143496e3cbbb40a1ced47aa58f2d633d3e38780cd068d5074
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	jar	package name	io	Highest
Vendor	pom	artifactid	commons-io	Low
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Vendor	jar	package name	file	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-io/	Highest
Vendor	pom	name	Apache Commons IO	High
Vendor	jar	package name	apache	Highest
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	groupid	commons-io	Highest
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	automatic-module-name	org.apache.commons.io	Medium
Vendor	file	name	commons-io	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	commons	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.commons-io	Medium
Product	pom	artifactid	commons-io	Highest
Product	jar	package name	io	Highest
Product	jar	package name	file	Highest
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-io/	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Apache Commons IO	High
Product	jar	package name	apache	Highest
Product	Manifest	Bundle-Name	Apache Commons IO	Medium
Product	pom	groupid	commons-io	Highest
Product	Manifest	automatic-module-name	org.apache.commons.io	Medium
Product	file	name	commons-io	High
Product	Manifest	specification-title	Apache Commons IO	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	url	https://commons.apache.org/proper/commons-io/	Medium
Product	Manifest	Implementation-Title	Apache Commons IO	High
Product	jar	package name	commons	Highest
Version	pom	parent-version	2.8.0	Low
Version	Manifest	Implementation-Version	2.8.0	High
Version	Manifest	Bundle-Version	2.8.0	High
Version	pom	version	2.8.0	Highest
Version	file	version	2.8.0	High

Identifiers

pkg:maven/commons-io/commons-io@2.8.0 (Confidence:High)
cpe:2.3:a:apache:commons_io:2.8.0:*:*:*:*:*:*:* (Confidence:Highest)

commons-lang3-3.12.0.jar

Description:

  Apache Commons Lang, a package of Java utility classes for the
  classes that are in java.lang's hierarchy, or are considered to be so
  standard as to justify existence in java.lang.

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/commons/commons-lang3/3.12.0/commons-lang3-3.12.0.jar
MD5: 19fe50567358922bdad277959ea69545
SHA1: c6842c86792ff03b9f1d1fe2aab8dc23aa6c6f0e
SHA256:d919d904486c037f8d193412da0c92e22a9fa24230b9d67a57855c5c31c7e94e
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	org.apache.commons	Highest
Vendor	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Vendor	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Vendor	pom	url	https://commons.apache.org/proper/commons-lang/	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	commons-lang3	Low
Vendor	pom	groupid	apache.commons	Highest
Vendor	jar	package name	apache	Highest
Vendor	file	name	commons-lang3	High
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	Apache Commons Lang	High
Vendor	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	lang3	Highest
Product	pom	parent-groupid	org.apache.commons	Medium
Product	Manifest	Implementation-Title	Apache Commons Lang	High
Product	pom	url	https://commons.apache.org/proper/commons-lang/	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.lang3	Medium
Product	Manifest	bundle-docurl	https://commons.apache.org/proper/commons-lang/	Low
Product	Manifest	Bundle-Name	Apache Commons Lang	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	groupid	apache.commons	Highest
Product	jar	package name	apache	Highest
Product	file	name	commons-lang3	High
Product	pom	parent-artifactid	commons-parent	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	name	Apache Commons Lang	High
Product	Manifest	automatic-module-name	org.apache.commons.lang3	Medium
Product	pom	artifactid	commons-lang3	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	lang3	Highest
Product	Manifest	specification-title	Apache Commons Lang	Medium
Version	pom	version	3.12.0	Highest
Version	file	version	3.12.0	High
Version	pom	parent-version	3.12.0	Low
Version	Manifest	Bundle-Version	3.12.0	High
Version	Manifest	Implementation-Version	3.12.0	High

Identifiers

pkg:maven/org.apache.commons/commons-lang3@3.12.0 (Confidence:High)

commons-logging-1.2.jar

Description:

Apache Commons Logging is a thin adapter allowing configurable bridging to other,
    well known logging systems.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/commons-logging/commons-logging/1.2/commons-logging-1.2.jar
MD5: 040b4b4d8eac886f6b4a2a3bd2f31b00
SHA1: 4bfc12adfe4842bf07b657f0369c4cb522955686
SHA256:daddea1ea0be0f56978ab3006b8ac92834afeefbd9b7e4e6316fca57df0fa636
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	commons-logging	High
Vendor	pom	parent-groupid	org.apache.commons	Medium
Vendor	pom	groupid	commons-logging	Highest
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Vendor	pom	url	http://commons.apache.org/proper/commons-logging/	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	jar	package name	apache	Highest
Vendor	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Vendor	pom	artifactid	commons-logging	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	parent-artifactid	commons-parent	Low
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	name	Apache Commons Logging	High
Vendor	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Product	file	name	commons-logging	High
Product	pom	parent-groupid	org.apache.commons	Medium
Product	pom	groupid	commons-logging	Highest
Product	Manifest	implementation-build	tags/LOGGING_1_2_RC2@r1608092; 2014-07-05 20:11:44+0200	Low
Product	jar	package name	apache	Highest
Product	Manifest	bundle-docurl	http://commons.apache.org/proper/commons-logging/	Low
Product	Manifest	Implementation-Title	Apache Commons Logging	High
Product	Manifest	Bundle-Name	Apache Commons Logging	Medium
Product	Manifest	specification-title	Apache Commons Logging	Medium
Product	pom	parent-artifactid	commons-parent	Medium
Product	pom	artifactid	commons-logging	Highest
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	pom	name	Apache Commons Logging	High
Product	pom	url	http://commons.apache.org/proper/commons-logging/	Medium
Product	Manifest	bundle-symbolicname	org.apache.commons.logging	Medium
Version	pom	parent-version	1.2	Low
Version	Manifest	Implementation-Version	1.2	High
Version	pom	version	1.2	Highest
Version	file	version	1.2	High

Identifiers

pkg:maven/commons-logging/commons-logging@1.2 (Confidence:High)

content-type-2.1.jar

Description:

Java library for Content (Media) Type representation

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/nimbusds/content-type/2.1/content-type-2.1.jar
MD5: 12dfca4812c5b59fabf61bdc2a3b1525
SHA1: 66d618739859bc75ab9643b96a9839ac7802ec90
SHA256:f37ae072a89350d42d9508def6a40255f2671e6303da1bb0905d35b83ca48555
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	Connect2id Ltd.	Low
Vendor	Manifest	build-number	${buildNumber}	Low
Vendor	Manifest	Implementation-Vendor-Id	com.nimbusds	Medium
Vendor	pom	groupid	com.nimbusds	Highest
Vendor	pom	organization url	https://connect2id.com	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Nimbus Content Type	High
Vendor	jar	package name	nimbusds	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	artifactid	content-type	Low
Vendor	Manifest	Implementation-Vendor	Connect2id Ltd.	High
Vendor	Manifest	build-date	${timestamp}	Low
Vendor	Manifest	bundle-symbolicname	com.nimbusds.content-type	Medium
Vendor	pom	url	https://bitbucket.org/connect2id/nimbus-content-type	Highest
Vendor	Manifest	build-tag	2.1	Low
Vendor	pom	groupid	nimbusds	Highest
Vendor	file	name	content-type	High
Vendor	Manifest	bundle-docurl	https://connect2id.com	Low
Vendor	pom	organization name	Connect2id Ltd.	High
Product	Manifest	specification-title	Nimbus Content Type	Medium
Product	pom	organization url	https://connect2id.com	Low
Product	Manifest	Bundle-Name	Nimbus Content Type	Medium
Product	Manifest	build-number	${buildNumber}	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Nimbus Content Type	High
Product	jar	package name	nimbusds	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	url	https://bitbucket.org/connect2id/nimbus-content-type	Medium
Product	pom	organization name	Connect2id Ltd.	Low
Product	pom	artifactid	content-type	Highest
Product	Manifest	build-date	${timestamp}	Low
Product	Manifest	bundle-symbolicname	com.nimbusds.content-type	Medium
Product	Manifest	build-tag	2.1	Low
Product	pom	groupid	nimbusds	Highest
Product	file	name	content-type	High
Product	Manifest	bundle-docurl	https://connect2id.com	Low
Product	Manifest	Implementation-Title	Nimbus Content Type	High
Version	file	version	2.1	High
Version	pom	version	2.1	Highest
Version	Manifest	Implementation-Version	2.1	High
Version	Manifest	build-tag	2.1	Low

Identifiers

pkg:maven/com.nimbusds/content-type@2.1 (Confidence:High)

dom4j-2.1.3.jar

Description:

flexible XML framework for Java

License:

BSD 3-clause New License: https://github.com/dom4j/dom4j/blob/master/LICENSE

File Path: /home/jenkins/.mvnrepository/org/dom4j/dom4j/2.1.3/dom4j-2.1.3.jar
MD5: 41efcf234c5a05a8c590f9b51d53ca66
SHA1: a75914155a9f5808963170ec20653668a2ffd2fd
SHA256:549f3007c6290f6a901e57d1d331b4ed0e6bf7384f78bf10316ffceeca834de6
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	dom4j	Highest
Vendor	pom	artifactid	dom4j	Low
Vendor	pom	url	http://dom4j.github.io/	Highest
Vendor	pom	groupid	org.dom4j	Highest
Vendor	file	name	dom4j	High
Vendor	pom	groupid	dom4j	Highest
Vendor	jar	package name	dom4j	Low
Vendor	pom	name	dom4j	High
Product	pom	artifactid	dom4j	Highest
Product	jar	package name	dom4j	Highest
Product	file	name	dom4j	High
Product	pom	groupid	dom4j	Highest
Product	pom	url	http://dom4j.github.io/	Medium
Product	pom	name	dom4j	High
Version	pom	version	2.1.3	Highest
Version	file	version	2.1.3	High

Identifiers

pkg:maven/org.dom4j/dom4j@2.1.3 (Confidence:High)
cpe:2.3:a:dom4j_project:dom4j:2.1.3:*:*:*:*:*:*:* (Confidence:Highest)

entando-k8s-custom-model-6.3.1.jar

Description:

Entando's Kubernetes Custom Resources

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1, February 1999: https://www.gnu.org/licenses/lgpl-2.1.txt

File Path: /home/jenkins/.mvnrepository/org/entando/entando-k8s-custom-model/6.3.1/entando-k8s-custom-model-6.3.1.jar
MD5: 41152d435f84b9ff6f2639d99df6ff42
SHA1: bb0fb8aae46493f32c83f49b5debc357e9bacaf7
SHA256:1f4c30a803f72b9428696605c48cb8e5b67e72046c2e7e4b4d22c476b7c4c624
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	entando	Highest
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Entando Inc.	High
Vendor	pom	groupid	org.entando	Highest
Vendor	pom	organization name	Entando Inc.	High
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	groupid	entando	Highest
Vendor	pom	parent-artifactid	entando-quarkus-parent	Low
Vendor	pom	artifactid	entando-k8s-custom-model	Low
Vendor	pom	parent-groupid	org.entando	Medium
Vendor	jar	package name	model	Highest
Vendor	pom	name	Entando Kubernetes Custom Model	High
Vendor	pom	organization url	http://www.entando.com/	Medium
Vendor	Manifest	implementation-build	6.3.1	Low
Vendor	file	name	entando-k8s-custom-model	High
Vendor	pom	url	https://central.entando.com	Highest
Product	Manifest	Implementation-Title	Entando Kubernetes Custom Model	High
Product	jar	package name	entando	Highest
Product	jar	package name	kubernetes	Highest
Product	pom	organization url	http://www.entando.com/	Low
Product	pom	url	https://central.entando.com	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	pom	groupid	entando	Highest
Product	pom	artifactid	entando-k8s-custom-model	Highest
Product	pom	parent-groupid	org.entando	Medium
Product	jar	package name	model	Highest
Product	pom	name	Entando Kubernetes Custom Model	High
Product	pom	parent-artifactid	entando-quarkus-parent	Medium
Product	Manifest	implementation-build	6.3.1	Low
Product	file	name	entando-k8s-custom-model	High
Product	pom	organization name	Entando Inc.	Low
Version	file	version	6.3.1	High
Version	pom	parent-version	6.3.1	Low
Version	Manifest	Implementation-Version	6.3.1	High
Version	Manifest	implementation-build	6.3.1	Low
Version	pom	version	6.3.1	Highest

Identifiers

pkg:maven/org.entando/entando-k8s-custom-model@6.3.1 (Confidence:High)
cpe:2.3:a:quarkus:quarkus:6.3.1:*:*:*:*:*:*:* (Confidence:Low)

error_prone_annotations-2.5.1.jar

License:

Apache 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/google/errorprone/error_prone_annotations/2.5.1/error_prone_annotations-2.5.1.jar
MD5: 2bf3239388cf5c817cd83ecb692b045f
SHA1: 562d366678b89ce5d6b6b82c1a073880341e3fba
SHA256:ff80626baaf12a09342befd4e84cba9d50662f5fcd7f7a9b3490a6b7cf87e66c
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	error_prone_annotations	Low
Vendor	pom	parent-artifactid	error_prone_parent	Low
Vendor	pom	groupid	com.google.errorprone	Highest
Vendor	jar	package name	errorprone	Highest
Vendor	jar	package name	google	Highest
Vendor	file	name	error_prone_annotations	High
Vendor	jar	package name	annotations	Highest
Vendor	pom	groupid	google.errorprone	Highest
Vendor	pom	parent-groupid	com.google.errorprone	Medium
Vendor	pom	name	error-prone annotations	High
Vendor	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Product	pom	artifactid	error_prone_annotations	Highest
Product	jar	package name	errorprone	Highest
Product	jar	package name	google	Highest
Product	file	name	error_prone_annotations	High
Product	pom	parent-artifactid	error_prone_parent	Medium
Product	jar	package name	annotations	Highest
Product	pom	groupid	google.errorprone	Highest
Product	pom	parent-groupid	com.google.errorprone	Medium
Product	pom	name	error-prone annotations	High
Product	Manifest	automatic-module-name	com.google.errorprone.annotations	Medium
Version	file	version	2.5.1	High
Version	pom	version	2.5.1	Highest

Identifiers

pkg:maven/com.google.errorprone/error_prone_annotations@2.5.1 (Confidence:High)

faux-pas-0.8.0.jar

Description:

Error handling in Functional Programming

License:

MIT License: https://opensource.org/licenses/MIT

File Path: /home/jenkins/.mvnrepository/org/zalando/faux-pas/0.8.0/faux-pas-0.8.0.jar
MD5: 882e0a168fca081e0f97f16c3b1b2ce1
SHA1: 4a2d93111b2b5e35577fdf641a7551d3544b414f
SHA256:feb16c2d73cd1746d6717f52e67d50ccbec7789416597c9d08adbb641efc8e88
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Zalando SE	High
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	fauxpas	Low
Vendor	pom	url	zalando/faux-pas	Highest
Vendor	jar	package name	zalando	Low
Vendor	jar	package name	zalando	Highest
Vendor	pom	name	Faux Pas	High
Vendor	pom	groupid	org.zalando	Highest
Vendor	file	name	faux-pas	High
Vendor	pom	artifactid	faux-pas	Low
Product	pom	organization name	Zalando SE	Low
Product	pom	groupid	zalando	Highest
Product	jar	package name	fauxpas	Low
Product	jar	package name	zalando	Highest
Product	pom	name	Faux Pas	High
Product	pom	artifactid	faux-pas	Highest
Product	file	name	faux-pas	High
Product	pom	url	zalando/faux-pas	High
Version	pom	version	0.8.0	Highest
Version	file	version	0.8.0	High

Identifiers

pkg:maven/org.zalando/faux-pas@0.8.0 (Confidence:High)

generex-1.0.2.jar

Description:

Generex A Java Library for regex to Strings generation

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/github/mifmif/generex/1.0.2/generex-1.0.2.jar
MD5: a832db42f9e1c4f76930f547f6f80998
SHA1: b378f873b4e8d7616c3d920e2132cb1c87679600
SHA256:8f8ce233c335e08e113a3f9579de1046fb19927e82468b1bbebcd6cba8760b81
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-url	https://github.com/mifmif/Generex/tree/master	Low
Vendor	pom	groupid	github.mifmif	Highest
Vendor	jar	package name	generex	Highest
Vendor	file	name	generex	High
Vendor	pom	url	mifmif/Generex/tree/master	Highest
Vendor	jar	package name	regex	Highest
Vendor	pom	name	Generex	High
Vendor	pom	groupid	com.github.mifmif	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.github.mifmif	Medium
Vendor	jar	package name	mifmif	Highest
Vendor	pom	artifactid	generex	Low
Product	jar	package name	generex	Highest
Product	Manifest	implementation-url	https://github.com/mifmif/Generex/tree/master	Low
Product	pom	groupid	github.mifmif	Highest
Product	Manifest	specification-title	Generex	Medium
Product	file	name	generex	High
Product	pom	artifactid	generex	Highest
Product	Manifest	Implementation-Title	Generex	High
Product	jar	package name	regex	Highest
Product	pom	name	Generex	High
Product	jar	package name	mifmif	Highest
Product	pom	url	mifmif/Generex/tree/master	High
Version	pom	version	1.0.2	Highest
Version	file	version	1.0.2	High
Version	Manifest	Implementation-Version	1.0.2	High

Identifiers

pkg:maven/com.github.mifmif/generex@1.0.2 (Confidence:High)

h2-1.4.199.jar

Description:

H2 Database Engine

License:

MPL 2.0 or EPL 1.0: http://h2database.com/html/license.html

File Path: /home/jenkins/.mvnrepository/com/h2database/h2/1.4.199/h2-1.4.199.jar
MD5: f805f57d838de4b42ce01c7f85e46e1c
SHA1: 7bf08152984ed8859740ae3f97fae6c72771ae45
SHA256:3125a16743bc6b4cfbb61abba783203f1fb68230aa0fdc97898f796f99a5d42e
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-url	http://www.h2database.com	Low
Vendor	Manifest	bundle-category	jdbc	Low
Vendor	Manifest	bundle-symbolicname	com.h2database	Medium
Vendor	pom	groupid	com.h2database	Highest
Vendor	jar	package name	h2	Highest
Vendor	pom	url	http://www.h2database.com	Highest
Vendor	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Vendor	jar	package name	engine	Highest
Vendor	pom	groupid	h2database	Highest
Vendor	Manifest	automatic-module-name	com.h2database	Medium
Vendor	jar	package name	database	Highest
Vendor	pom	artifactid	h2	Low
Vendor	file	name	h2	High
Vendor	Manifest	multi-release	true	Low
Vendor	pom	name	H2 Database Engine	High
Product	Manifest	implementation-url	http://www.h2database.com	Low
Product	Manifest	Bundle-Name	H2 Database Engine	Medium
Product	Manifest	bundle-category	jdbc	Low
Product	Manifest	bundle-symbolicname	com.h2database	Medium
Product	jar	package name	h2	Highest
Product	jar	package name	org	Highest
Product	pom	artifactid	h2	Highest
Product	jar	package name	service	Highest
Product	Manifest	provide-capability	osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory	Low
Product	jar	package name	engine	Highest
Product	pom	groupid	h2database	Highest
Product	Manifest	automatic-module-name	com.h2database	Medium
Product	Manifest	Implementation-Title	H2 Database Engine	High
Product	jar	package name	database	Highest
Product	jar	package name	jdbc	Highest
Product	pom	url	http://www.h2database.com	Medium
Product	file	name	h2	High
Product	Manifest	multi-release	true	Low
Product	pom	name	H2 Database Engine	High
Version	pom	version	1.4.199	Highest
Version	Manifest	Bundle-Version	1.4.199	High
Version	file	version	1.4.199	High
Version	Manifest	Implementation-Version	1.4.199	High

Identifiers

pkg:maven/com.h2database/h2@1.4.199 (Confidence:High)
cpe:2.3:a:h2database:h2:1.4.199:*:*:*:*:*:*:* (Confidence:Highest)

hamcrest-2.2.jar

Description:

Core API and libraries of hamcrest matcher framework.

License:

BSD License 3: http://opensource.org/licenses/BSD-3-Clause

File Path: /home/jenkins/.mvnrepository/org/hamcrest/hamcrest/2.2/hamcrest-2.2.jar
MD5: 10b47e837f271d0662f28780e60388e8
SHA1: 1820c0968dba3a11a1b30669bb1f01978a91dedc
SHA256:5e62846a89f05cd78cd9c1a553f340d002458380c320455dd1f8fc5497a8a1c1
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	hamcrest	High
Vendor	pom	groupid	hamcrest	Highest
Vendor	jar	package name	core	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	groupid	org.hamcrest	Highest
Vendor	jar	package name	hamcrest	Highest
Vendor	pom	name	Hamcrest	High
Vendor	Manifest	automatic-module-name	org.hamcrest	Medium
Vendor	Manifest	Implementation-Vendor	hamcrest.org	High
Vendor	Manifest	bundle-symbolicname	org.hamcrest	Medium
Vendor	pom	artifactid	hamcrest	Low
Vendor	pom	url	http://hamcrest.org/JavaHamcrest/	Highest
Vendor	jar	package name	matcher	Highest
Product	file	name	hamcrest	High
Product	Manifest	Implementation-Title	hamcrest	High
Product	pom	groupid	hamcrest	Highest
Product	jar	package name	core	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	hamcrest	Highest
Product	Manifest	Bundle-Name	hamcrest	Medium
Product	pom	name	Hamcrest	High
Product	Manifest	automatic-module-name	org.hamcrest	Medium
Product	Manifest	bundle-symbolicname	org.hamcrest	Medium
Product	pom	artifactid	hamcrest	Highest
Product	pom	url	http://hamcrest.org/JavaHamcrest/	Medium
Product	jar	package name	matcher	Highest
Version	file	version	2.2	High
Version	pom	version	2.2	Highest
Version	Manifest	Implementation-Version	2.2	High
Version	Manifest	Bundle-Version	2.2	High

Identifiers

pkg:maven/org.hamcrest/hamcrest@2.2 (Confidence:High)

hibernate-commons-annotations-5.1.2.Final.jar

Description:

Common reflection code used in support of annotation processing

License:

GNU Library General Public License v2.1 or later: http://www.opensource.org/licenses/LGPL-2.1

File Path: /home/jenkins/.mvnrepository/org/hibernate/common/hibernate-commons-annotations/5.1.2.Final/hibernate-commons-annotations-5.1.2.Final.jar
MD5: 2a2490b3eb8e7585a6a899d27d7ed43f
SHA1: e59ffdbc6ad09eeb33507b39ffcf287679a498c8
SHA256:1c7ce712b2679fea0a5441eb02a04144297125b768944819be0765befb996275
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	pom	groupid	org.hibernate.common	Highest
Vendor	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Vendor	jar	package name	reflection	Highest
Vendor	jar	package name	hibernate	Highest
Vendor	file	name	hibernate-commons-annotations	High
Vendor	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Vendor	pom	name	Hibernate Commons Annotations	High
Vendor	pom	groupid	hibernate.common	Highest
Vendor	pom	url	http://hibernate.org	Highest
Vendor	pom	artifactid	hibernate-commons-annotations	Low
Vendor	Manifest	implementation-url	http://hibernate.org	Low
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	organization url	http://hibernate.org	Medium
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	common	Highest
Vendor	pom	organization name	Hibernate.org	High
Product	Manifest	bundle-symbolicname	org.hibernate.common.hibernate-commons-annotations	Medium
Product	pom	organization name	Hibernate.org	Low
Product	jar	package name	reflection	Highest
Product	jar	package name	hibernate	Highest
Product	pom	url	http://hibernate.org	Medium
Product	file	name	hibernate-commons-annotations	High
Product	Manifest	automatic-module-name	org.hibernate.commons.annotations	Medium
Product	pom	name	Hibernate Commons Annotations	High
Product	pom	groupid	hibernate.common	Highest
Product	pom	artifactid	hibernate-commons-annotations	Highest
Product	Manifest	implementation-url	http://hibernate.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	organization url	http://hibernate.org	Low
Product	jar	package name	version	Highest
Product	Manifest	Bundle-Name	hibernate-commons-annotations	Medium
Product	jar	package name	annotations	Highest
Product	jar	package name	common	Highest
Version	pom	version	5.1.2.Final	Highest
Version	Manifest	Bundle-Version	5.1.2.Final	High
Version	Manifest	Implementation-Version	5.1.2.Final	High

Identifiers

pkg:maven/org.hibernate.common/hibernate-commons-annotations@5.1.2.Final (Confidence:High)

hibernate-core-5.4.28.Final.jar

Description:

Hibernate's core ORM functionality

License:

GNU Library General Public License v2.1 or later: http://www.opensource.org/licenses/LGPL-2.1

File Path: /home/jenkins/.mvnrepository/org/hibernate/hibernate-core/5.4.28.Final/hibernate-core-5.4.28.Final.jar
MD5: b82ef126a37e8423b1a102f9a905dffa
SHA1: c096dbb27f83655ec252165340b532733c58e8fb
SHA256:baebf41f25bd106e11a2954772bfea96723dc37b1abe7dc8fc861e5fce9ccbed
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	org.hibernate	Medium
Vendor	file	name	hibernate-core	High
Vendor	jar	package name	hibernate	Highest
Vendor	Manifest	bundle-docurl	http://www.hibernate.org/orm/5.4	Low
Vendor	pom	name	Hibernate ORM - hibernate-core	High
Vendor	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Vendor	Manifest	implementation-url	http://hibernate.org/orm	Low
Vendor	pom	groupid	org.hibernate	Highest
Vendor	Manifest	specification-vendor	Hibernate.org	Low
Vendor	pom	artifactid	hibernate-core	Low
Vendor	pom	url	http://hibernate.org/orm	Highest
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	organization url	http://hibernate.org	Medium
Vendor	Manifest	Implementation-Vendor	Hibernate.org	High
Vendor	pom	organization name	Hibernate.org	High
Vendor	pom	groupid	hibernate	Highest
Product	jar	package name	filter	Highest
Product	pom	organization name	Hibernate.org	Low
Product	file	name	hibernate-core	High
Product	jar	package name	hibernate	Highest
Product	Manifest	bundle-docurl	http://www.hibernate.org/orm/5.4	Low
Product	pom	name	Hibernate ORM - hibernate-core	High
Product	Manifest	automatic-module-name	org.hibernate.orm.core	Medium
Product	Manifest	implementation-url	http://hibernate.org/orm	Low
Product	Manifest	specification-title	hibernate-core	Medium
Product	Manifest	Bundle-Name	hibernate-core	Medium
Product	pom	artifactid	hibernate-core	Highest
Product	Manifest	bundle-symbolicname	org.hibernate.orm.core	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	organization url	http://hibernate.org	Low
Product	pom	url	http://hibernate.org/orm	Medium
Product	hint analyzer	product	orm	Highest
Product	jar	package name	version	Highest
Product	Manifest	Implementation-Title	hibernate-core	High
Product	pom	groupid	hibernate	Highest
Version	Manifest	Bundle-Version	5.4.28.Final	High
Version	Manifest	Implementation-Version	5.4.28.Final	High
Version	pom	version	5.4.28.Final	Highest

Identifiers

pkg:maven/org.hibernate/hibernate-core@5.4.28.Final (Confidence:High)
cpe:2.3:a:hibernate:hibernate_orm:5.4.28:*:*:*:*:*:*:* (Confidence:Low)

httpclient-4.5.13.jar

Description:

   Apache HttpComponents Client

File Path: /home/jenkins/.mvnrepository/org/apache/httpcomponents/httpclient/4.5.13/httpclient-4.5.13.jar
MD5: 40d6b9075fbd28fa10292a45a0db9457
SHA1: e5f6cae5ca7ecaac1ec2827a9e2d65ae2869cada
SHA256:6fe9026a566c6a5001608cf3fc32196641f6c1e5e1986d1037ccdbd5f31ef743
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client	Low
Vendor	pom	parent-groupid	org.apache.httpcomponents	Medium
Vendor	pom	artifactid	httpclient	Low
Vendor	jar	package name	httpclient	Highest
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	parent-artifactid	httpcomponents-client	Low
Vendor	pom	groupid	apache.httpcomponents	Highest
Vendor	jar	package name	apache	Highest
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	pom	url	http://hc.apache.org/httpcomponents-client	Highest
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	name	Apache HttpClient	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.httpcomponents	Medium
Vendor	jar	package name	client	Highest
Vendor	file	name	httpclient	High
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-client	Low
Product	pom	parent-groupid	org.apache.httpcomponents	Medium
Product	pom	parent-artifactid	httpcomponents-client	Medium
Product	jar	package name	httpclient	Highest
Product	pom	groupid	apache.httpcomponents	Highest
Product	Manifest	Implementation-Title	Apache HttpClient	High
Product	pom	artifactid	httpclient	Highest
Product	jar	package name	apache	Highest
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpclient	Medium
Product	jar	package name	http	Highest
Product	Manifest	specification-title	Apache HttpClient	Medium
Product	pom	name	Apache HttpClient	High
Product	pom	url	http://hc.apache.org/httpcomponents-client	Medium
Product	jar	package name	client	Highest
Product	file	name	httpclient	High
Version	pom	version	4.5.13	Highest
Version	file	version	4.5.13	High
Version	Manifest	Implementation-Version	4.5.13	High

Identifiers

pkg:maven/org.apache.httpcomponents/httpclient@4.5.13 (Confidence:High)
cpe:2.3:a:apache:httpclient:4.5.13:*:*:*:*:*:*:* (Confidence:Highest)

httpcore-4.4.14.jar

Description:

   Apache HttpComponents Core (blocking I/O)

File Path: /home/jenkins/.mvnrepository/org/apache/httpcomponents/httpcore/4.4.14/httpcore-4.4.14.jar
MD5: 2b3991eda121042765a5ee299556c200
SHA1: 9dd1a631c082d92ecd4bd8fd4cf55026c720a8c1
SHA256:f956209e450cb1d0c51776dfbd23e53e9dd8db9a1298ed62b70bf0944ba63b28
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	httpcore	High
Vendor	pom	parent-groupid	org.apache.httpcomponents	Medium
Vendor	pom	url	http://hc.apache.org/httpcomponents-core-ga	Highest
Vendor	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	pom	groupid	apache.httpcomponents	Highest
Vendor	pom	artifactid	httpcore	Low
Vendor	Manifest	Implementation-Vendor-Id	org.apache	Medium
Vendor	pom	parent-artifactid	httpcomponents-core	Low
Vendor	jar	package name	apache	Highest
Vendor	pom	groupid	org.apache.httpcomponents	Highest
Vendor	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2020-11-26 19:07:01+0000	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	name	Apache HttpCore	High
Vendor	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Vendor	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	Manifest	Implementation-Title	HttpComponents Apache HttpCore	High
Product	file	name	httpcore	High
Product	pom	parent-artifactid	httpcomponents-core	Medium
Product	pom	parent-groupid	org.apache.httpcomponents	Medium
Product	Manifest	implementation-url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	pom	groupid	apache.httpcomponents	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	http	Highest
Product	Manifest	implementation-build	${scmBranch}@r${buildNumber}; 2020-11-26 19:07:01+0000	Low
Product	pom	name	Apache HttpCore	High
Product	Manifest	automatic-module-name	org.apache.httpcomponents.httpcore	Medium
Product	Manifest	specification-title	HttpComponents Apache HttpCore	Medium
Product	Manifest	url	http://hc.apache.org/httpcomponents-core-ga	Low
Product	pom	artifactid	httpcore	Highest
Product	pom	url	http://hc.apache.org/httpcomponents-core-ga	Medium
Version	file	version	4.4.14	High
Version	Manifest	Implementation-Version	4.4.14	High
Version	pom	version	4.4.14	Highest

Identifiers

pkg:maven/org.apache.httpcomponents/httpcore@4.4.14 (Confidence:High)

istack-commons-runtime-3.0.12.jar

Description:

istack common utility code

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/com/sun/istack/istack-commons-runtime/3.0.12/istack-commons-runtime-3.0.12.jar
MD5: 1952bd76321f8580cfaa57e332a68287
SHA1: cbbe1a62b0cc6c85972e99d52aaee350153dc530
SHA256:27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor-Id	com.sun.istack	Medium
Vendor	Manifest	bundle-symbolicname	com.sun.istack.commons-runtime	Medium
Vendor	Manifest	implementation-build-id	3.0.12 - 7ed1368	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	file	name	istack-commons-runtime	High
Vendor	pom	name	istack common utility code runtime	High
Vendor	pom	groupid	com.sun.istack	Highest
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	jar	package name	istack	Highest
Vendor	pom	parent-groupid	com.sun.istack	Medium
Vendor	pom	artifactid	istack-commons-runtime	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	groupid	sun.istack	Highest
Vendor	pom	parent-artifactid	istack-commons	Low
Vendor	jar	package name	sun	Highest
Vendor	jar	package name	com	Highest
Vendor	Manifest	multi-release	true	Low
Product	Manifest	bundle-symbolicname	com.sun.istack.commons-runtime	Medium
Product	Manifest	implementation-build-id	3.0.12 - 7ed1368	Low
Product	file	name	istack-commons-runtime	High
Product	Manifest	Bundle-Name	istack common utility code runtime	Medium
Product	pom	name	istack common utility code runtime	High
Product	pom	parent-artifactid	istack-commons	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	jar	package name	istack	Highest
Product	pom	parent-groupid	com.sun.istack	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	groupid	sun.istack	Highest
Product	jar	package name	sun	Highest
Product	jar	package name	com	Highest
Product	Manifest	multi-release	true	Low
Product	pom	artifactid	istack-commons-runtime	Highest
Version	pom	version	3.0.12	Highest
Version	Manifest	implementation-build-id	3.0.12	Low
Version	file	version	3.0.12	High
Version	Manifest	Bundle-Version	3.0.12	High

Identifiers

pkg:maven/com.sun.istack/istack-commons-runtime@3.0.12 (Confidence:High)
cpe:2.3:a:oracle:java_se:3.0.12:*:*:*:*:*:*:* (Confidence:Low)

jackson-annotations-2.12.4.jar

Description:

Core annotations used for value types, used by Jackson data binding package.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/core/jackson-annotations/2.12.4/jackson-annotations-2.12.4.jar
MD5: 16c7a1094270a27013fd58df7f6800f7
SHA1: 752cf9a2562ac2c012e48057e3a4c17dad66c66e
SHA256:f6aa3706a875689b66cdac3334f65dfdb795ccfad4117bf072893b196ed1ec8e
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	file	name	jackson-annotations	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Vendor	pom	artifactid	jackson-annotations	Low
Vendor	Manifest	implementation-build-date	2021-07-06 19:42:23+0000	Low
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	pom	parent-artifactid	jackson-parent	Low
Vendor	pom	name	Jackson-annotations	High
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	jar	package name	jackson	Highest
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Product	jar	package name	fasterxml	Highest
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	hint analyzer	product	java8	Highest
Product	file	name	jackson-annotations	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	Implementation-Title	Jackson-annotations	High
Product	pom	parent-artifactid	jackson-parent	Medium
Product	Manifest	specification-title	Jackson-annotations	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-annotations	Medium
Product	Manifest	implementation-build-date	2021-07-06 19:42:23+0000	Low
Product	Manifest	Bundle-Name	Jackson-annotations	Medium
Product	pom	name	Jackson-annotations	High
Product	pom	artifactid	jackson-annotations	Highest
Product	jar	package name	jackson	Highest
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	groupid	fasterxml.jackson.core	Highest
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	hint analyzer	product	modules	Highest
Version	Manifest	Bundle-Version	2.12.4	High
Version	pom	parent-version	2.12.4	Low
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.12.4 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:*:*:*:*:*:*:* (Confidence:Low)

jackson-core-2.12.4.jar

Description:

Core Jackson processing abstractions (aka Streaming API), implementation for JSON

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/core/jackson-core/2.12.4/jackson-core-2.12.4.jar
MD5: 58ffcb451f0bf6beb78e306cfe5d46f3
SHA1: 006a1bd259b6c4e3f9219ec8ec0be55ed11eed0c
SHA256:3506ce47ec2604ae2d80d79505f7cb374f718060639415c07d144adadd2d68a3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	name	Jackson-core	High
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	url	FasterXML/jackson-core	Highest
Vendor	Manifest	implementation-build-date	2021-07-06 19:51:10+0000	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	jar	package name	json	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	core	Highest
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Vendor	jar	package name	base	Highest
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	artifactid	jackson-core	Low
Vendor	file	name	jackson-core	High
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	jar	package name	json	Highest
Product	pom	artifactid	jackson-core	Highest
Product	jar	package name	core	Highest
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-core	Low
Product	jar	package name	jackson	Highest
Product	jar	package name	base	Highest
Product	jar	package name	version	Highest
Product	file	name	jackson-core	High
Product	jar	package name	fasterxml	Highest
Product	jar	package name	filter	Highest
Product	pom	name	Jackson-core	High
Product	pom	url	FasterXML/jackson-core	High
Product	hint analyzer	product	java8	Highest
Product	Manifest	implementation-build-date	2021-07-06 19:51:10+0000	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Bundle-Name	Jackson-core	Medium
Product	Manifest	Implementation-Title	Jackson-core	High
Product	Manifest	specification-title	Jackson-core	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-core	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	pom	groupid	fasterxml.jackson.core	Highest
Product	hint analyzer	product	modules	Highest
Version	Manifest	Bundle-Version	2.12.4	High
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-core@2.12.4 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:*:*:*:*:*:*:* (Confidence:Low)

jackson-databind-2.10.5.1.jar

Description:

General data-binding functionality for Jackson: works on core streaming API

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/core/jackson-databind/2.10.5.1/jackson-databind-2.10.5.1.jar
MD5: 3aec7825a3153ea9d62582e1f6efea0b
SHA1: 7ff756c3af1fe95cb3cddba9158fc3289ca06387
SHA256:f93db83891a53e8d268e2cc8fcd88ead2981edc2163e35c2a52c88d9ab57b4a0
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.fasterxml.jackson.core	Highest
Vendor	jar	package name	fasterxml	Highest
Vendor	file	name	jackson-databind	High
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Vendor	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	parent-artifactid	jackson-base	Low
Vendor	pom	name	jackson-databind	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.core	Medium
Vendor	Manifest	implementation-build-date	2020-12-02 03:47:00+0000	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	url	http://github.com/FasterXML/jackson	Highest
Vendor	jar	package name	jackson	Highest
Vendor	pom	parent-groupid	com.fasterxml.jackson	Medium
Vendor	pom	artifactid	jackson-databind	Low
Vendor	jar	package name	databind	Highest
Vendor	pom	groupid	fasterxml.jackson.core	Highest
Product	jar	package name	fasterxml	Highest
Product	file	name	jackson-databind	High
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.core.jackson-databind	Medium
Product	Manifest	bundle-docurl	http://github.com/FasterXML/jackson	Low
Product	Manifest	Implementation-Title	jackson-databind	High
Product	hint analyzer	product	java8	Highest
Product	pom	artifactid	jackson-databind	Highest
Product	pom	parent-artifactid	jackson-base	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	Bundle-Name	jackson-databind	Medium
Product	pom	name	jackson-databind	High
Product	Manifest	implementation-build-date	2020-12-02 03:47:00+0000	Low
Product	jar	package name	jackson	Highest
Product	Manifest	specification-title	jackson-databind	Medium
Product	pom	parent-groupid	com.fasterxml.jackson	Medium
Product	jar	package name	databind	Highest
Product	pom	groupid	fasterxml.jackson.core	Highest
Product	pom	url	http://github.com/FasterXML/jackson	Medium
Product	hint analyzer	product	modules	Highest
Version	Manifest	Bundle-Version	2.10.5.1	High
Version	Manifest	Implementation-Version	2.10.5.1	High
Version	pom	version	2.10.5.1	Highest
Version	file	version	2.10.5.1	High
Version	pom	parent-version	2.10.5.1	Low

Identifiers

pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.10.5.1 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-databind:2.10.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.10.5.1:*:*:*:*:*:*:* (Confidence:Low)

jackson-dataformat-yaml-2.9.9.jar

Description:

Support for reading and writing YAML-encoded data via Jackson abstractions.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.9.9/jackson-dataformat-yaml-2.9.9.jar
MD5: d69448f6ca2107748153c5366a98c101
SHA1: 0ccc00ed13e4d74f9c5cc30465b6fc4fe5ce5473
SHA256:2a0fcacfaba5128a7164c2311b35a35e2f9eedb29f5935de5553716b454455cf
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.dataformat	Medium
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	yaml	Highest
Vendor	pom	groupid	fasterxml.jackson.dataformat	Highest
Vendor	pom	name	Jackson-dataformat-YAML	High
Vendor	Manifest	implementation-build-date	2019-05-16 06:02:17+0000	Low
Vendor	file	name	jackson-dataformat-yaml	High
Vendor	pom	url	FasterXML/jackson-dataformats-text	Highest
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	jar	package name	jackson	Highest
Vendor	jar	package name	dataformat	Highest
Vendor	pom	parent-artifactid	jackson-dataformats-text	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson.dataformat	Medium
Vendor	Manifest	automatic-module-name	com.fasterxml.jackson.dataformat.yaml	Medium
Vendor	pom	groupid	com.fasterxml.jackson.dataformat	Highest
Vendor	pom	artifactid	jackson-dataformat-yaml	Low
Product	jar	package name	fasterxml	Highest
Product	pom	artifactid	jackson-dataformat-yaml	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.dataformat.jackson-dataformat-yaml	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	yaml	Highest
Product	pom	groupid	fasterxml.jackson.dataformat	Highest
Product	pom	name	Jackson-dataformat-YAML	High
Product	Manifest	implementation-build-date	2019-05-16 06:02:17+0000	Low
Product	Manifest	Bundle-Name	Jackson-dataformat-YAML	Medium
Product	pom	parent-artifactid	jackson-dataformats-text	Medium
Product	file	name	jackson-dataformat-yaml	High
Product	pom	url	FasterXML/jackson-dataformats-text	High
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-dataformats-text	Low
Product	Manifest	Implementation-Title	Jackson-dataformat-YAML	High
Product	jar	package name	jackson	Highest
Product	jar	package name	dataformat	Highest
Product	Manifest	specification-title	Jackson-dataformat-YAML	Medium
Product	pom	parent-groupid	com.fasterxml.jackson.dataformat	Medium
Product	Manifest	automatic-module-name	com.fasterxml.jackson.dataformat.yaml	Medium
Version	Manifest	Implementation-Version	2.9.9	High
Version	Manifest	Bundle-Version	2.9.9	High
Version	pom	version	2.9.9	Highest
Version	file	version	2.9.9	High

Identifiers

pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.9.9 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-dataformat-xml:2.9.9:*:*:*:*:*:*:* (Confidence:Highest)

jackson-datatype-jdk8-2.12.4.jar

Description:

Add-on module for Jackson (http://jackson.codehaus.org) to support
JDK 8 data types.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.12.4/jackson-datatype-jdk8-2.12.4.jar
MD5: 4ed32780449ec72246a29c424ddf1ca8
SHA1: 0858a1e1b677cbafd3b100d5154f491a7051401c
SHA256:00852350fc1503344723b590f1afe9593ab732fb5b035659b503b49bbea5c9b2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.datatype	Medium
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	jar	package name	jdk8	Highest
Vendor	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Vendor	file	name	jackson-datatype-jdk8	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.datatype.jackson-datatype-jdk8	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8	Low
Vendor	pom	artifactid	jackson-datatype-jdk8	Low
Vendor	jar	package name	datatype	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	groupid	com.fasterxml.jackson.datatype	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	jackson-modules-java8	Low
Vendor	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Vendor	pom	groupid	fasterxml.jackson.datatype	Highest
Vendor	pom	name	Jackson datatype: jdk8	High
Product	jar	package name	fasterxml	Highest
Product	Manifest	Bundle-Name	Jackson datatype: jdk8	Medium
Product	jar	package name	jdk8	Highest
Product	Manifest	specification-title	Jackson datatype: jdk8	Medium
Product	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Product	file	name	jackson-datatype-jdk8	High
Product	Manifest	Implementation-Title	Jackson datatype: jdk8	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.datatype.jackson-datatype-jdk8	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8	Low
Product	jar	package name	datatype	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	jackson-datatype-jdk8	Highest
Product	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Product	pom	parent-artifactid	jackson-modules-java8	Medium
Product	pom	groupid	fasterxml.jackson.datatype	Highest
Product	pom	name	Jackson datatype: jdk8	High
Version	Manifest	Bundle-Version	2.12.4	High
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.12.4 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:*:*:*:*:*:*:* (Confidence:Low)

jackson-datatype-jsr310-2.12.4.jar

Description:

Add-on module to support JSR-310 (Java 8 Date & Time API) data types.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.12.4/jackson-datatype-jsr310-2.12.4.jar
MD5: 0ab0ba0ba9299d74c36a7c60c26f6b99
SHA1: b1174c05d4ded121a7eaeed3f148709f9585b981
SHA256:af5a384d020e43f91f56d083f170d67aaf5aead71fa8fa1ad80a425b13ba13e4
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.datatype	Medium
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310	Low
Vendor	pom	artifactid	jackson-datatype-jsr310	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	file	name	jackson-datatype-jsr310	High
Vendor	pom	name	Jackson datatype: JSR310	High
Vendor	jar	package name	datatype	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	pom	groupid	com.fasterxml.jackson.datatype	Highest
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	jackson-modules-java8	Low
Vendor	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Vendor	pom	groupid	fasterxml.jackson.datatype	Highest
Vendor	jar	package name	jsr310	Highest
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.datatype.jackson-datatype-jsr310	Medium
Product	jar	package name	fasterxml	Highest
Product	Manifest	Implementation-Title	Jackson datatype: JSR310	High
Product	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	specification-title	Jackson datatype: JSR310	Medium
Product	file	name	jackson-datatype-jsr310	High
Product	pom	name	Jackson datatype: JSR310	High
Product	jar	package name	datatype	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	Bundle-Name	Jackson datatype: JSR310	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Product	pom	parent-artifactid	jackson-modules-java8	Medium
Product	pom	artifactid	jackson-datatype-jsr310	Highest
Product	pom	groupid	fasterxml.jackson.datatype	Highest
Product	jar	package name	jsr310	Highest
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.datatype.jackson-datatype-jsr310	Medium
Version	Manifest	Bundle-Version	2.12.4	High
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.12.4 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:*:*:*:*:*:*:* (Confidence:Low)

jackson-datatype-problem-0.23.0.jar

Description:

Add-on module to support Problem data types.

File Path: /home/jenkins/.mvnrepository/org/zalando/jackson-datatype-problem/0.23.0/jackson-datatype-problem-0.23.0.jar
MD5: 568f613fc7bfd858cee61f932a6b6397
SHA1: a8dcc007754dbd0b38d01c91e02756458d88f522
SHA256:f297e601a744a35c61789b28cb9fec1133723395facbff93f0ad83dde39d734a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.zalando	Medium
Vendor	pom	name	Jackson-datatype-Problem	High
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	problem	Highest
Vendor	jar	package name	zalando	Low
Vendor	jar	package name	zalando	Highest
Vendor	pom	artifactid	jackson-datatype-problem	Low
Vendor	pom	groupid	org.zalando	Highest
Vendor	file	name	jackson-datatype-problem	High
Vendor	pom	parent-artifactid	problem-parent	Low
Vendor	jar	package name	problem	Low
Product	pom	parent-groupid	org.zalando	Medium
Product	pom	name	Jackson-datatype-Problem	High
Product	pom	groupid	zalando	Highest
Product	jar	package name	problem	Highest
Product	jar	package name	zalando	Highest
Product	pom	artifactid	jackson-datatype-problem	Highest
Product	pom	parent-artifactid	problem-parent	Medium
Product	file	name	jackson-datatype-problem	High
Product	jar	package name	problem	Low
Version	pom	version	0.23.0	Highest
Version	file	version	0.23.0	High

Identifiers

pkg:maven/org.zalando/jackson-datatype-problem@0.23.0 (Confidence:High)

jackson-module-jaxb-annotations-2.12.4.jar

Description:

Support for using JAXB annotations as an alternative to "native" Jackson annotations, for configuring
data-binding.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.12.4/jackson-module-jaxb-annotations-2.12.4.jar
MD5: 29ff9647ec16c8e897b29c380b7e87d7
SHA1: 5e43703aae1a9843dfd7df0a0ad6cbfedcaff67f
SHA256:7a6063c76ba26f14f18b808ad50955f87fa20d2a5225a1d8dc5add63ce234f75
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	groupid	com.fasterxml.jackson.module	Highest
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	name	Jackson module: JAXB Annotations	High
Vendor	Manifest	implementation-build-date	2021-07-06 20:47:51+0000	Low
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.module.jackson-module-jaxb-annotations	Medium
Vendor	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Vendor	pom	parent-artifactid	jackson-modules-base	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	jaxb	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.module	Medium
Vendor	jar	package name	module	Highest
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	jar	package name	jackson	Highest
Vendor	pom	groupid	fasterxml.jackson.module	Highest
Vendor	pom	artifactid	jackson-module-jaxb-annotations	Low
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-base	Low
Vendor	Manifest	multi-release	true	Low
Vendor	file	name	jackson-module-jaxb-annotations	High
Vendor	pom	url	FasterXML/jackson-modules-base	Highest
Product	jar	package name	fasterxml	Highest
Product	pom	name	Jackson module: JAXB Annotations	High
Product	Manifest	implementation-build-date	2021-07-06 20:47:51+0000	Low
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.module.jackson-module-jaxb-annotations	Medium
Product	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Product	Manifest	specification-title	Jackson module: JAXB Annotations	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	jackson-module-jaxb-annotations	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	parent-artifactid	jackson-modules-base	Medium
Product	jar	package name	jaxb	Highest
Product	jar	package name	module	Highest
Product	jar	package name	jackson	Highest
Product	Manifest	Implementation-Title	Jackson module: JAXB Annotations	High
Product	pom	url	FasterXML/jackson-modules-base	High
Product	pom	groupid	fasterxml.jackson.module	Highest
Product	Manifest	Bundle-Name	Jackson module: JAXB Annotations	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-base	Low
Product	Manifest	multi-release	true	Low
Product	file	name	jackson-module-jaxb-annotations	High
Version	Manifest	Bundle-Version	2.12.4	High
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.12.4 (Confidence:High)

jackson-module-parameter-names-2.12.4.jar

Description:

Add-on module for Jackson (http://jackson.codehaus.org) to support
introspection of method/constructor parameter names, without having to add explicit property name annotation.

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/fasterxml/jackson/module/jackson-module-parameter-names/2.12.4/jackson-module-parameter-names-2.12.4.jar
MD5: 812f2c571f7006e0b6788e23aff7e1ec
SHA1: 87c4e9a3302f0fafe4e5587f9c27d22847d8fe00
SHA256:d1336fe625a5b030fe99227a721e890a559e43efe0ac05a8bcf7a5e5f8bc6432
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	fasterxml	Highest
Vendor	pom	groupid	com.fasterxml.jackson.module	Highest
Vendor	Manifest	specification-vendor	FasterXML	Low
Vendor	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Vendor	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Jackson-module-parameter-names	High
Vendor	Manifest	Implementation-Vendor-Id	com.fasterxml.jackson.module	Medium
Vendor	jar	package name	module	Highest
Vendor	file	name	jackson-module-parameter-names	High
Vendor	Manifest	Implementation-Vendor	FasterXML	High
Vendor	jar	package name	jackson	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	jackson-modules-java8	Low
Vendor	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Vendor	pom	groupid	fasterxml.jackson.module	Highest
Vendor	Manifest	bundle-symbolicname	com.fasterxml.jackson.module.jackson-module-parameter-names	Medium
Vendor	pom	artifactid	jackson-module-parameter-names	Low
Product	jar	package name	fasterxml	Highest
Product	pom	parent-groupid	com.fasterxml.jackson.module	Medium
Product	Manifest	bundle-docurl	https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names	Low
Product	Manifest	Bundle-Name	Jackson-module-parameter-names	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Jackson-module-parameter-names	High
Product	jar	package name	module	Highest
Product	file	name	jackson-module-parameter-names	High
Product	jar	package name	jackson	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	jackson-module-parameter-names	Highest
Product	Manifest	Implementation-Title	Jackson-module-parameter-names	High
Product	Manifest	implementation-build-date	2021-07-06 20:52:01+0000	Low
Product	pom	groupid	fasterxml.jackson.module	Highest
Product	pom	parent-artifactid	jackson-modules-java8	Medium
Product	Manifest	bundle-symbolicname	com.fasterxml.jackson.module.jackson-module-parameter-names	Medium
Product	Manifest	specification-title	Jackson-module-parameter-names	Medium
Version	Manifest	Bundle-Version	2.12.4	High
Version	Manifest	Implementation-Version	2.12.4	High
Version	file	version	2.12.4	High
Version	pom	version	2.12.4	Highest

Identifiers

pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.12.4 (Confidence:High)
cpe:2.3:a:fasterxml:jackson-modules-java8:2.12.4:*:*:*:*:*:*:* (Confidence:Low)

jakarta.activation-1.2.2.jar

Description:

Jakarta Activation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar
MD5: 0b8bee3bf29b9a015f8b992035581a7c
SHA1: 74548703f9851017ce2f556066659438019e7eb5
SHA256:02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Jakarta Activation	High
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	pom	artifactid	jakarta.activation	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	groupid	com.sun.activation	Highest
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=9.0))"	Low
Vendor	pom	parent-artifactid	all	Low
Vendor	jar	package name	activation	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	file	name	jakarta.activation	High
Vendor	Manifest	bundle-symbolicname	com.sun.activation.jakarta.activation	Medium
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	jar	package name	sun	Highest
Vendor	pom	groupid	sun.activation	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Product	pom	name	Jakarta Activation	High
Product	pom	parent-groupid	com.sun.activation	Medium
Product	pom	artifactid	jakarta.activation	Highest
Product	pom	parent-artifactid	all	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=9.0))"	Low
Product	jar	package name	activation	Highest
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	file	name	jakarta.activation	High
Product	Manifest	specification-title	Jakarta Activation Specification	Medium
Product	Manifest	bundle-symbolicname	com.sun.activation.jakarta.activation	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	jar	package name	sun	Highest
Product	pom	groupid	sun.activation	Highest
Product	Manifest	Implementation-Title	javax.activation	High
Product	Manifest	Bundle-Name	Jakarta Activation	Medium
Product	jar	package name	javax	Highest
Version	pom	version	1.2.2	Highest
Version	file	version	1.2.2	High
Version	Manifest	Bundle-Version	1.2.2	High
Version	Manifest	Implementation-Version	1.2.2	High

Identifiers

pkg:maven/com.sun.activation/jakarta.activation@1.2.2 (Confidence:High)
cpe:2.3:a:oracle:java_se:1.2.2:*:*:*:*:*:*:* (Confidence:Low)

jakarta.activation-api-1.2.2.jar

Description:

Jakarta Activation API jar

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar
MD5: 1cbb480310fa1987f9db7a3ed7118af7
SHA1: 99f53adba383cb1bf7c3862844488574b559621f
SHA256:a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=9.0))"	Low
Vendor	pom	parent-artifactid	all	Low
Vendor	jar	package name	activation	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	pom	groupid	jakarta.activation	Highest
Vendor	Manifest	extension-name	jakarta.activation	Medium
Vendor	pom	name	Jakarta Activation API jar	High
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	file	name	jakarta.activation-api	High
Vendor	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Vendor	pom	artifactid	jakarta.activation-api	Low
Product	pom	parent-groupid	com.sun.activation	Medium
Product	pom	parent-artifactid	all	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=9.0))"	Low
Product	jar	package name	activation	Highest
Product	Manifest	Implementation-Title	jakarta.activation.jakarta.activation-api	High
Product	pom	artifactid	jakarta.activation-api	Highest
Product	Manifest	Bundle-Name	Jakarta Activation API jar	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	pom	groupid	jakarta.activation	Highest
Product	Manifest	specification-title	jakarta.activation.jakarta.activation-api	Medium
Product	Manifest	extension-name	jakarta.activation	Medium
Product	pom	name	Jakarta Activation API jar	High
Product	file	name	jakarta.activation-api	High
Product	Manifest	bundle-symbolicname	jakarta.activation-api	Medium
Version	pom	version	1.2.2	Highest
Version	file	version	1.2.2	High
Version	Manifest	Bundle-Version	1.2.2	High
Version	Manifest	Implementation-Version	1.2.2	High

Identifiers

pkg:maven/jakarta.activation/jakarta.activation-api@1.2.2 (Confidence:High)

jakarta.annotation-api-1.3.5.jar

Description:

Jakarta Annotations API

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/jenkins/.mvnrepository/jakarta/annotation/jakarta.annotation-api/1.3.5/jakarta.annotation-api-1.3.5.jar
MD5: 8b165cf58df5f8c2a222f637c0a07c97
SHA1: 59eb84ee0d616332ff44aba065f3888cf002cd2d
SHA256:85fb03fc054cdf4efca8efd9b6712bbb418e1ab98241c4539c8585bbc23e1b8a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	jakarta.annotation-api	Low
Vendor	Manifest	automatic-module-name	java.annotation	Medium
Vendor	pom	name	Jakarta Annotations API	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	extension-name	jakarta.annotation	Medium
Vendor	file	name	jakarta.annotation-api	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	ca-parent	Low
Vendor	pom	groupid	jakarta.annotation	Highest
Vendor	jar	package name	annotation	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Product	pom	artifactid	jakarta.annotation-api	Highest
Product	Manifest	automatic-module-name	java.annotation	Medium
Product	pom	name	Jakarta Annotations API	High
Product	Manifest	Bundle-Name	Jakarta Annotations API	Medium
Product	Manifest	bundle-symbolicname	jakarta.annotation-api	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	extension-name	jakarta.annotation	Medium
Product	file	name	jakarta.annotation-api	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	url	https://projects.eclipse.org/projects/ee4j.ca	Medium
Product	pom	parent-artifactid	ca-parent	Medium
Product	jar	package name	annotation	Highest
Product	pom	groupid	jakarta.annotation	Highest
Version	Manifest	Implementation-Version	1.3.5	High
Version	file	version	1.3.5	High
Version	Manifest	Bundle-Version	1.3.5	High
Version	pom	version	1.3.5	Highest

Identifiers

pkg:maven/jakarta.annotation/jakarta.annotation-api@1.3.5 (Confidence:High)

jakarta.mail-1.6.7.jar

Description:

Jakarta Mail API

License:

http://www.eclipse.org/legal/epl-2.0, https://www.gnu.org/software/classpath/license.html, http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/com/sun/mail/jakarta.mail/1.6.7/jakarta.mail-1.6.7.jar
MD5: 17eb378c9dd574be23e71014ce9d5d30
SHA1: 319df0e9d536c1a01acdfe49b6e82b97d2393073
SHA256:1b258ef45fae93059b65d0a0dd109e59ab93e8cd8a735ff66b2ba85f870d5150
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	sun.mail	Highest
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	pom	artifactid	jakarta.mail	Low
Vendor	jar	package name	mail	Highest
Vendor	Manifest	bundle-symbolicname	com.sun.mail.jakarta.mail	Medium
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	jar	package name	provider	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	parent-artifactid	all	Low
Vendor	pom	groupid	com.sun.mail	Highest
Vendor	pom	name	Jakarta Mail API	High
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	file	name	jakarta.mail	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	com.sun.mail	Medium
Vendor	jar	package name	sun	Highest
Vendor	Manifest	probe-provider-xml-file-names	META-INF/gfprobe-provider.xml	Medium
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	jar	package name	javax	Highest
Vendor	Manifest	extension-name	javax.mail	Medium
Product	pom	groupid	sun.mail	Highest
Product	pom	artifactid	jakarta.mail	Highest
Product	Manifest	Implementation-Title	javax.mail	High
Product	jar	package name	mail	Highest
Product	Manifest	bundle-symbolicname	com.sun.mail.jakarta.mail	Medium
Product	pom	parent-artifactid	all	Medium
Product	jar	package name	provider	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	pom	name	Jakarta Mail API	High
Product	Manifest	specification-title	Jakarta Mail API Design Specification	Medium
Product	file	name	jakarta.mail	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	com.sun.mail	Medium
Product	Manifest	Bundle-Name	Jakarta Mail API	Medium
Product	jar	package name	sun	Highest
Product	jar	package name	version	Highest
Product	Manifest	probe-provider-xml-file-names	META-INF/gfprobe-provider.xml	Medium
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	jar	package name	javax	Highest
Product	Manifest	extension-name	javax.mail	Medium
Version	file	version	1.6.7	High
Version	pom	version	1.6.7	Highest
Version	Manifest	Bundle-Version	1.6.7	High
Version	Manifest	Implementation-Version	1.6.7	High

Identifiers

pkg:maven/com.sun.mail/jakarta.mail@1.6.7 (Confidence:High)
cpe:2.3:a:oracle:java_se:1.6.7:*:*:*:*:*:*:* (Confidence:Low)

jakarta.persistence-api-2.2.3.jar

Description:

Jakarta Persistence 2.2 API jar

License:

Eclipse Public License v. 2.0: http://www.eclipse.org/legal/epl-2.0
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/jakarta/persistence/jakarta.persistence-api/2.2.3/jakarta.persistence-api-2.2.3.jar
MD5: e0a655f398f8e68e0afebb0f71fba4e5
SHA1: 8f6ea5daedc614f07a3654a455660145286f024e
SHA256:0c2d73ab36ad24eeed6e0bea928e9d0ef771de8df689e23b7754d366dda27c53
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Jakarta Persistence API	High
Vendor	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Vendor	pom	groupid	jakarta.persistence	Highest
Vendor	file	name	jakarta.persistence-api	High
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	pom	url	eclipse-ee4j/jpa-api	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	pom	artifactid	jakarta.persistence-api	Low
Vendor	Manifest	extension-name	jakarta.persistence	Medium
Vendor	jar	package name	persistence	Highest
Vendor	Manifest	automatic-module-name	java.persistence	Medium
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	parent-artifactid	project	Medium
Product	pom	name	Jakarta Persistence API	High
Product	Manifest	bundle-symbolicname	jakarta.persistence-api	Medium
Product	pom	groupid	jakarta.persistence	Highest
Product	file	name	jakarta.persistence-api	High
Product	Manifest	Bundle-Name	Jakarta Persistence API jar	Medium
Product	pom	url	eclipse-ee4j/jpa-api	High
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	extension-name	jakarta.persistence	Medium
Product	jar	package name	persistence	Highest
Product	Manifest	automatic-module-name	java.persistence	Medium
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	artifactid	jakarta.persistence-api	Highest
Version	Manifest	Implementation-Version	2.2.3	High
Version	pom	parent-version	2.2.3	Low
Version	Manifest	Bundle-Version	2.2.3	High
Version	file	version	2.2.3	High
Version	pom	version	2.2.3	Highest

Identifiers

pkg:maven/jakarta.persistence/jakarta.persistence-api@2.2.3 (Confidence:High)

jakarta.servlet-api-4.0.4.jar

Description:

Jakarta Servlet 4.0

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/jenkins/.mvnrepository/jakarta/servlet/jakarta.servlet-api/4.0.4/jakarta.servlet-api-4.0.4.jar
MD5: f5d1d7a29978e4ae0be5a456ee1c65c3
SHA1: b8a1142e04838fe54194049c6e7a18dae8f9b960
SHA256:586e27706c21258f5882f43be06904f49b02db9ac54e345d393fe4a32494d127
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jakarta.servlet-api	High
Vendor	jar	package name	servlet	Highest
Vendor	pom	name	Jakarta Servlet	High
Vendor	Manifest	Implementation-Vendor-Id	org.eclipse	Medium
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Highest
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	extension-name	javax.servlet	Medium
Vendor	Manifest	automatic-module-name	java.servlet	Medium
Vendor	pom	groupid	jakarta.servlet	Highest
Vendor	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Vendor	pom	artifactid	jakarta.servlet-api	Low
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	jar	package name	javax	Highest
Product	jar	package name	filter	Highest
Product	Manifest	Bundle-Name	Jakarta Servlet	Medium
Product	pom	parent-artifactid	project	Medium
Product	file	name	jakarta.servlet-api	High
Product	jar	package name	servlet	Highest
Product	pom	name	Jakarta Servlet	High
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	extension-name	javax.servlet	Medium
Product	Manifest	automatic-module-name	java.servlet	Medium
Product	pom	artifactid	jakarta.servlet-api	Highest
Product	Manifest	bundle-symbolicname	jakarta.servlet-api	Medium
Product	pom	groupid	jakarta.servlet	Highest
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	jar	package name	javax	Highest
Product	pom	url	https://projects.eclipse.org/projects/ee4j.servlet	Medium
Version	Manifest	Implementation-Version	4.0.4	High
Version	pom	version	4.0.4	Highest
Version	file	version	4.0.4	High
Version	pom	parent-version	4.0.4	Low

Identifiers

pkg:maven/jakarta.servlet/jakarta.servlet-api@4.0.4 (Confidence:High)

jakarta.transaction-api-1.3.3.jar

Description:

Jakarta Transactions

License:

EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html

File Path: /home/jenkins/.mvnrepository/jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.jar
MD5: cc45726045cc9a0728f803f9db4c90c4
SHA1: c4179d48720a1e87202115fbed6089bdc4195405
SHA256:0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	jakarta.transaction-api	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	extension-name	javax.transaction	Medium
Vendor	pom	groupid	jakarta.transaction	Highest
Vendor	Manifest	Implementation-Vendor	EE4J Community	High
Vendor	pom	organization name	EE4J Community	High
Vendor	pom	artifactid	jakarta.transaction-api	Low
Vendor	Manifest	bundle-docurl	https://github.com/eclipse-ee4j	Low
Vendor	pom	url	https://projects.eclipse.org/projects/ee4j.jta	Highest
Vendor	pom	organization url	eclipse-ee4j	Medium
Vendor	jar	package name	transaction	Highest
Vendor	file	name	jakarta.transaction-api	High
Vendor	pom	parent-artifactid	project	Low
Vendor	pom	parent-groupid	org.eclipse.ee4j	Medium
Vendor	pom	name	${extension.name} API	High
Vendor	jar	package name	javax	Highest
Vendor	Manifest	automatic-module-name	java.transaction	Medium
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Product	Manifest	bundle-symbolicname	jakarta.transaction-api	Medium
Product	pom	parent-artifactid	project	Medium
Product	Manifest	extension-name	javax.transaction	Medium
Product	pom	groupid	jakarta.transaction	Highest
Product	pom	url	eclipse-ee4j	High
Product	Manifest	bundle-docurl	https://github.com/eclipse-ee4j	Low
Product	pom	artifactid	jakarta.transaction-api	Highest
Product	jar	package name	transaction	Highest
Product	Manifest	Bundle-Name	javax.transaction API	Medium
Product	pom	url	https://projects.eclipse.org/projects/ee4j.jta	Medium
Product	file	name	jakarta.transaction-api	High
Product	pom	parent-groupid	org.eclipse.ee4j	Medium
Product	pom	organization name	EE4J Community	Low
Product	pom	name	${extension.name} API	High
Product	jar	package name	javax	Highest
Product	Manifest	automatic-module-name	java.transaction	Medium
Version	Manifest	Implementation-Version	1.3.3	High
Version	file	version	1.3.3	High
Version	pom	parent-version	1.3.3	Low
Version	pom	version	1.3.3	Highest
Version	Manifest	Bundle-Version	1.3.3	High

Identifiers

pkg:maven/jakarta.transaction/jakarta.transaction-api@1.3.3 (Confidence:High)
cpe:2.3:a:oracle:projects:1.3.3:*:*:*:*:*:*:* (Confidence:Low)

jakarta.xml.bind-api-2.3.3.jar

Description:

Jakarta XML Binding API 2.3 Design Specification

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar
MD5: 61286918ca0192e9f87d1358aef718dd
SHA1: 48e3b9cfc10752fba3521d6511f4165bea951801
SHA256:c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bind	Highest
Vendor	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Vendor	pom	parent-artifactid	jakarta.xml.bind-api-parent	Low
Vendor	Manifest	implementation-build-id	2.3.3-RELEASE-fd06b2b	Low
Vendor	Manifest	specification-vendor	Eclipse Foundation	Low
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	pom	groupid	jakarta.xml.bind	Highest
Vendor	pom	artifactid	jakarta.xml.bind-api	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	extension-name	jakarta.xml.bind	Medium
Vendor	file	name	jakarta.xml.bind-api	High
Vendor	jar	package name	xml	Highest
Vendor	pom	name	Jakarta XML Binding API	High
Vendor	Manifest	multi-release	true	Low
Product	jar	package name	bind	Highest
Product	Manifest	bundle-symbolicname	jakarta.xml.bind-api	Medium
Product	Manifest	implementation-build-id	2.3.3-RELEASE-fd06b2b	Low
Product	pom	parent-artifactid	jakarta.xml.bind-api-parent	Medium
Product	pom	artifactid	jakarta.xml.bind-api	Highest
Product	Manifest	build-jdk-spec	11	Low
Product	Manifest	Bundle-Name	Jakarta XML Binding API	Medium
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	pom	groupid	jakarta.xml.bind	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	extension-name	jakarta.xml.bind	Medium
Product	file	name	jakarta.xml.bind-api	High
Product	jar	package name	xml	Highest
Product	pom	name	Jakarta XML Binding API	High
Product	Manifest	multi-release	true	Low
Version	file	version	2.3.3	High
Version	pom	version	2.3.3	Highest
Version	Manifest	Bundle-Version	2.3.3	High
Version	Manifest	Implementation-Version	2.3.3	High

Identifiers

pkg:maven/jakarta.xml.bind/jakarta.xml.bind-api@2.3.3 (Confidence:High)

jandex-2.2.3.Final.jar

Description:

Parent POM for JBoss projects. Provides default project build configuration.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/jboss/jandex/2.2.3.Final/jandex-2.2.3.Final.jar
MD5: 721b5868cfbb718dd97facc96929dde8
SHA1: d3865101f0666b63586683bd811d754517f331ab
SHA256:0544d55ec0cb378fd8f3b20e66277f893f3094cb67e71a1ec0cce6ce150f83b3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	jar	package name	jboss	Highest
Vendor	Manifest	os-arch	x86_64	Low
Vendor	Manifest	java-vendor	AdoptOpenJDK	Medium
Vendor	file	name	jandex	High
Vendor	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Vendor	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Vendor	jar	package name	jandex	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.jboss	Medium
Vendor	Manifest	os-name	Mac OS X	Medium
Vendor	jar	package name	indexer	Highest
Vendor	pom	groupid	jboss	Highest
Vendor	Manifest	build-timestamp	Fri, 22 Jan 2021 15:14:59 -0600	Low
Vendor	pom	name	Java Annotation Indexer	High
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	automatic-module-name	org.jboss.jandex	Medium
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	pom	artifactid	jandex	Low
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	groupid	org.jboss	Highest
Vendor	pom	parent-groupid	org.jboss	Medium
Product	jar	package name	jboss	Highest
Product	Manifest	os-arch	x86_64	Low
Product	Manifest	Implementation-Title	Java Annotation Indexer	High
Product	file	name	jandex	High
Product	Manifest	bundle-symbolicname	org.jboss.jandex	Medium
Product	Manifest	implementation-url	http://www.jboss.org/jandex	Low
Product	Manifest	specification-title	Java Annotation Indexer	Medium
Product	jar	package name	jandex	Highest
Product	Manifest	os-name	Mac OS X	Medium
Product	jar	package name	indexer	Highest
Product	pom	groupid	jboss	Highest
Product	Manifest	build-timestamp	Fri, 22 Jan 2021 15:14:59 -0600	Low
Product	pom	name	Java Annotation Indexer	High
Product	pom	artifactid	jandex	Highest
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	automatic-module-name	org.jboss.jandex	Medium
Product	pom	parent-artifactid	jboss-parent	Medium
Product	pom	parent-groupid	org.jboss	Medium
Product	Manifest	Bundle-Name	Java Annotation Indexer	Medium
Version	Manifest	Implementation-Version	2.2.3.Final	High
Version	pom	parent-version	2.2.3.Final	Low
Version	Manifest	Bundle-Version	2.2.3.Final	High
Version	pom	version	2.2.3.Final	Highest

Identifiers

pkg:maven/org.jboss/jandex@2.2.3.Final (Confidence:High)

java-semver-0.9.0.jar

Description:

Java implementation of the SemVer Specification

License:

The MIT License: http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.mvnrepository/com/github/zafarkhaja/java-semver/0.9.0/java-semver-0.9.0.jar
MD5: 9417096ff6a9db74db273abbda0f334e
SHA1: 59a83ca73c72a5e25b3f0b1bb305230a11000329
SHA256:2218c73b40f9af98b570d084420c1b4a81332297bd7fc27ddd552e903be8e93c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	url	zafarkhaja/jsemver	Highest
Vendor	file	name	java-semver	High
Vendor	pom	groupid	github.zafarkhaja	Highest
Vendor	jar	package name	github	Highest
Vendor	pom	groupid	com.github.zafarkhaja	Highest
Vendor	pom	artifactid	java-semver	Low
Vendor	jar	package name	semver	Highest
Vendor	jar	package name	semver	Low
Vendor	jar	package name	zafarkhaja	Low
Vendor	jar	package name	github	Low
Vendor	pom	name	Java SemVer	High
Vendor	jar	package name	zafarkhaja	Highest
Product	jar	package name	semver	Highest
Product	jar	package name	semver	Low
Product	jar	package name	zafarkhaja	Low
Product	file	name	java-semver	High
Product	pom	name	Java SemVer	High
Product	pom	groupid	github.zafarkhaja	Highest
Product	jar	package name	zafarkhaja	Highest
Product	pom	artifactid	java-semver	Highest
Product	jar	package name	github	Highest
Product	pom	url	zafarkhaja/jsemver	High
Version	file	version	0.9.0	High
Version	pom	version	0.9.0	Highest

Identifiers

pkg:maven/com.github.zafarkhaja/java-semver@0.9.0 (Confidence:High)

javassist-3.23.1-GA.jar

Description:

  	Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
    simple.  It is a class library for editing bytecodes in Java.

License:

MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/

File Path: /home/jenkins/.mvnrepository/org/javassist/javassist/3.23.1-GA/javassist-3.23.1-GA.jar
MD5: c99b30482cfdcd42bdc301970a3b2d5d
SHA1: c072c13dcb7f705471c40bafb1536171df850ab2
SHA256:d2b14c09763523374624f32a09d6e31fcb174082a97addb5ae2d580b474fd806
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	javassist	Medium
Vendor	pom	groupid	org.javassist	Highest
Vendor	pom	organization name	Shigeru Chiba, www.javassist.org	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	pom	groupid	javassist	Highest
Vendor	jar	package name	bytecode	Highest
Vendor	Manifest	specification-vendor	Shigeru Chiba, www.javassist.org	Low
Vendor	pom	artifactid	javassist	Low
Vendor	pom	url	http://www.javassist.org/	Highest
Vendor	file	name	javassist	High
Vendor	pom	name	Javassist	High
Vendor	jar	package name	javassist	Highest
Product	Manifest	bundle-symbolicname	javassist	Medium
Product	pom	organization name	Shigeru Chiba, www.javassist.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	pom	groupid	javassist	Highest
Product	jar	package name	bytecode	Highest
Product	Manifest	specification-title	Javassist	Medium
Product	pom	artifactid	javassist	Highest
Product	file	name	javassist	High
Product	pom	name	Javassist	High
Product	Manifest	Bundle-Name	Javassist	Medium
Product	jar	package name	javassist	Highest
Product	pom	url	http://www.javassist.org/	Medium
Version	Manifest	specification-version	3.23.1-GA	High
Version	pom	version	3.23.1-GA	Highest

Identifiers

pkg:maven/org.javassist/javassist@3.23.1-GA (Confidence:High)

javax.activation-api-1.2.0.jar

Description:

JavaBeans Activation Framework API jar

License:

https://github.com/javaee/activation/blob/master/LICENSE.txt

File Path: /home/jenkins/.mvnrepository/javax/activation/javax.activation-api/1.2.0/javax.activation-api-1.2.0.jar
MD5: 5e50e56bcf4a3ef3bc758f69f7643c3b
SHA1: 85262acf3ca9816f9537ca47d5adeabaead7cb16
SHA256:43fdef0b5b6ceb31b0424b208b930c74ab58fac2ceeb7b3f6fd3aeb8b5ca4393
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	com.sun.activation	Medium
Vendor	file	name	javax.activation-api	High
Vendor	Manifest (hint)	specification-vendor	sun	Low
Vendor	Manifest	automatic-module-name	java.activation	Medium
Vendor	Manifest	extension-name	javax.activation	Medium
Vendor	Manifest	specification-vendor	Oracle	Low
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	Manifest	bundle-symbolicname	javax.activation-api	Medium
Vendor	pom	artifactid	javax.activation-api	Low
Vendor	pom	parent-artifactid	all	Low
Vendor	jar	package name	activation	Highest
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	pom	name	JavaBeans Activation Framework API jar	High
Vendor	Manifest	bundle-docurl	http://www.oracle.com	Low
Vendor	Manifest	Implementation-Vendor-Id	com.sun	Medium
Vendor	pom	groupid	javax.activation	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Product	Manifest	Implementation-Title	javax.activation.javax.activation-api	High
Product	pom	parent-groupid	com.sun.activation	Medium
Product	file	name	javax.activation-api	High
Product	Manifest	specification-title	javax.activation.javax.activation-api	Medium
Product	Manifest	automatic-module-name	java.activation	Medium
Product	Manifest	extension-name	javax.activation	Medium
Product	pom	parent-artifactid	all	Medium
Product	Manifest	bundle-symbolicname	javax.activation-api	Medium
Product	jar	package name	activation	Highest
Product	pom	name	JavaBeans Activation Framework API jar	High
Product	pom	artifactid	javax.activation-api	Highest
Product	Manifest	bundle-docurl	http://www.oracle.com	Low
Product	Manifest	Bundle-Name	JavaBeans Activation Framework API jar	Medium
Product	pom	groupid	javax.activation	Highest
Product	jar	package name	javax	Highest
Product	Manifest	originally-created-by	1.8.0_141 (Oracle Corporation)	Low
Version	file	version	1.2.0	High
Version	Manifest	Bundle-Version	1.2.0	High
Version	Manifest	Implementation-Version	1.2.0	High
Version	pom	version	1.2.0	Highest

Identifiers

pkg:maven/javax.activation/javax.activation-api@1.2.0 (Confidence:High)

javax.annotation-api-1.3.2.jar

Description:

Common Annotations for the JavaTM Platform API

License:

CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE

File Path: /home/jenkins/.mvnrepository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256:e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	net.java	Medium
Vendor	Manifest	automatic-module-name	java.annotation	Medium
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	pom	url	http://jcp.org/en/jsr/detail?id=250	Highest
Vendor	pom	groupid	javax.annotation	Highest
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	organization url	https://javaee.github.io/glassfish	Medium
Vendor	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Vendor	pom	artifactid	javax.annotation-api	Low
Vendor	Manifest	extension-name	javax.annotation	Medium
Vendor	pom	organization name	GlassFish Community	High
Vendor	file	name	javax.annotation-api	High
Vendor	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Vendor	Manifest	Implementation-Vendor	GlassFish Community	High
Vendor	pom	name	${extension.name} API	High
Vendor	jar	package name	javax	Highest
Vendor	jar	package name	annotation	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Product	pom	parent-groupid	net.java	Medium
Product	pom	url	http://jcp.org/en/jsr/detail?id=250	Medium
Product	Manifest	automatic-module-name	java.annotation	Medium
Product	pom	groupid	javax.annotation	Highest
Product	pom	artifactid	javax.annotation-api	Highest
Product	Manifest	bundle-symbolicname	javax.annotation-api	Medium
Product	Manifest	extension-name	javax.annotation	Medium
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	pom	organization url	https://javaee.github.io/glassfish	Low
Product	pom	organization name	GlassFish Community	Low
Product	file	name	javax.annotation-api	High
Product	Manifest	bundle-docurl	https://javaee.github.io/glassfish	Low
Product	Manifest	Bundle-Name	javax.annotation API	Medium
Product	pom	name	${extension.name} API	High
Product	jar	package name	javax	Highest
Product	jar	package name	annotation	Highest
Version	pom	parent-version	1.3.2	Low
Version	Manifest	Implementation-Version	1.3.2	High
Version	file	version	1.3.2	High
Version	pom	version	1.3.2	Highest
Version	Manifest	Bundle-Version	1.3.2	High

Identifiers

pkg:maven/javax.annotation/javax.annotation-api@1.3.2 (Confidence:High)

javax.persistence-api-2.2.jar

Description:

Java(TM) Persistence API

License:

Eclipse Public License v1.0: http://www.eclipse.org/legal/epl-v10.html
Eclipse Distribution License v. 1.0: http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/javax/persistence/javax.persistence-api/2.2/javax.persistence-api-2.2.jar
MD5: e6520b3435f5b6d58eee415b5542abf8
SHA1: 25665ac8c0b62f50e6488173233239120fc52c96
SHA256:5578b71b37999a5eaed3fea0d14aa61c60c6ec6328256f2b63472f336318baf4
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	net.java	Medium
Vendor	pom	url	javaee/jpa-spec	Highest
Vendor	file	name	javax.persistence-api	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Vendor	pom	groupid	javax.persistence	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.oracle	Medium
Vendor	pom	parent-artifactid	jvnet-parent	Low
Vendor	pom	artifactid	javax.persistence-api	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	jar	package name	persistence	Highest
Vendor	Manifest	automatic-module-name	java.persistence	Medium
Vendor	jar	package name	javax	Highest
Vendor	Manifest	extension-name	javax.persistence	Medium
Product	pom	parent-groupid	net.java	Medium
Product	file	name	javax.persistence-api	High
Product	Manifest	Bundle-Name	Java(TM) Persistence API jar	Medium
Product	Manifest	bundle-symbolicname	javax.persistence-api	Medium
Product	pom	groupid	javax.persistence	Highest
Product	pom	url	javaee/jpa-spec	High
Product	pom	parent-artifactid	jvnet-parent	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	persistence	Highest
Product	jar	package name	version	Highest
Product	Manifest	automatic-module-name	java.persistence	Medium
Product	pom	artifactid	javax.persistence-api	Highest
Product	jar	package name	javax	Highest
Product	Manifest	extension-name	javax.persistence	Medium
Version	file	version	2.2	High
Version	pom	version	2.2	Highest
Version	Manifest	Implementation-Version	2.2	High
Version	pom	parent-version	2.2	Low
Version	Manifest	Bundle-Version	2.2	High

Identifiers

pkg:maven/javax.persistence/javax.persistence-api@2.2 (Confidence:High)
cpe:2.3:a:oracle:java_se:2.2:*:*:*:*:*:*:* (Confidence:Low)

jaxb-api-2.3.1.jar

Description:

JAXB (JSR 222) API

License:

https://oss.oracle.com/licenses/CDDL+GPL-1.1, https://oss.oracle.com/licenses/CDDL+GPL-1.1

File Path: /home/jenkins/.mvnrepository/javax/xml/bind/jaxb-api/2.3.1/jaxb-api-2.3.1.jar
MD5: bcf270d320f645ad19f5edb60091e87f
SHA1: 8531ad5ac454cc2deb9d4d32c40c4d7451939b5d
SHA256:88b955a0df57880a26a74708bc34f74dcaf8ebf4e78843a28b50eae945732b06
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	bind	Highest
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	extension-name	javax.xml.bind	Medium
Vendor	pom	groupid	javax.xml.bind	Highest
Vendor	pom	parent-artifactid	jaxb-api-parent	Low
Vendor	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Vendor	Manifest	bundle-docurl	http://www.oracle.com/	Low
Vendor	jar	package name	jaxb	Highest
Vendor	file	name	jaxb-api	High
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Vendor	Manifest	bundle-symbolicname	jaxb-api	Medium
Vendor	pom	artifactid	jaxb-api	Low
Vendor	jar	package name	xml	Highest
Vendor	jar	package name	javax	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish	Medium
Product	jar	package name	bind	Highest
Product	Manifest	extension-name	javax.xml.bind	Medium
Product	pom	groupid	javax.xml.bind	Highest
Product	Manifest	implementation-build-id	UNKNOWN-7de2ca118a0cfc4a373872915aef59148dff5f93, 2018-09-12T06:28:43-0700	Low
Product	Manifest	bundle-docurl	http://www.oracle.com/	Low
Product	Manifest	Bundle-Name	jaxb-api	Medium
Product	pom	parent-artifactid	jaxb-api-parent	Medium
Product	jar	package name	jaxb	Highest
Product	file	name	jaxb-api	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version>=1.8))"	Low
Product	pom	artifactid	jaxb-api	Highest
Product	Manifest	bundle-symbolicname	jaxb-api	Medium
Product	Manifest	specification-title	jaxb-api	Medium
Product	jar	package name	xml	Highest
Product	jar	package name	javax	Highest
Product	Manifest	multi-release	true	Low
Version	pom	version	2.3.1	Highest
Version	Manifest	Bundle-Version	2.3.1	High
Version	file	version	2.3.1	High

Identifiers

pkg:maven/javax.xml.bind/jaxb-api@2.3.1 (Confidence:High)
cpe:2.3:a:oracle:java_se:2.3.1:*:*:*:*:*:*:* (Confidence:Low)

jaxb-runtime-2.3.4.jar

Description:

JAXB (JSR 222) Reference Implementation

License:

http://www.eclipse.org/org/documents/edl-v10.php

File Path: /home/jenkins/.mvnrepository/org/glassfish/jaxb/jaxb-runtime/2.3.4/jaxb-runtime-2.3.4.jar
MD5: da74c0c22d36ddbf71e0274ab1341265
SHA1: 5f3828d3a345ff3d8acb83f07ba04eccf59e15bb
SHA256:2881182f9a1b4e76ac1fcbdedfb60f306824ded657980e048cfff21128e067d5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-build-id	2.3.4 - 2a16b4e	Low
Vendor	Manifest	Implementation-Vendor-Id	org.glassfish.jaxb	Medium
Vendor	jar	package name	bind	Highest
Vendor	file	name	jaxb-runtime	High
Vendor	pom	name	JAXB Runtime	High
Vendor	pom	artifactid	jaxb-runtime	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	pom	parent-artifactid	jaxb-runtime-parent	Low
Vendor	pom	groupid	org.glassfish.jaxb	Highest
Vendor	Manifest	bundle-symbolicname	org.glassfish.jaxb.runtime	Medium
Vendor	Manifest	bundle-docurl	https://www.eclipse.org	Low
Vendor	Manifest	git-revision	2a16b4e	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	jar	package name	sun	Highest
Vendor	jar	package name	com	Highest
Vendor	jar	package name	xml	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	pom	groupid	glassfish.jaxb	Highest
Product	Manifest	implementation-build-id	2.3.4 - 2a16b4e	Low
Product	jar	package name	bind	Highest
Product	file	name	jaxb-runtime	High
Product	pom	name	JAXB Runtime	High
Product	pom	artifactid	jaxb-runtime	Highest
Product	Manifest	specification-title	Jakarta XML Binding	Medium
Product	Manifest	bundle-symbolicname	org.glassfish.jaxb.runtime	Medium
Product	Manifest	Implementation-Title	Jakarta XML Binding Implementation	High
Product	Manifest	bundle-docurl	https://www.eclipse.org	Low
Product	Manifest	git-revision	2a16b4e	Low
Product	Manifest	Bundle-Name	JAXB Runtime	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	jar	package name	sun	Highest
Product	jar	package name	com	Highest
Product	jar	package name	xml	Highest
Product	Manifest	multi-release	true	Low
Product	pom	groupid	glassfish.jaxb	Highest
Product	pom	parent-artifactid	jaxb-runtime-parent	Medium
Version	file	version	2.3.4	High
Version	pom	version	2.3.4	Highest
Version	Manifest	Implementation-Version	2.3.4	High
Version	Manifest	build-id	2.3.4	Medium
Version	Manifest	major-version	2.3.4	Medium
Version	Manifest	Bundle-Version	2.3.4	High
Version	Manifest	implementation-build-id	2.3.4	Low

Identifiers

pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.4 (Confidence:High)
cpe:2.3:a:oracle:java_se:2.3.4:*:*:*:*:*:*:* (Confidence:Low)

jboss-logging-3.4.2.Final.jar

Description:

The JBoss Logging Framework

License:

Apache License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/jboss/logging/jboss-logging/3.4.2.Final/jboss-logging-3.4.2.Final.jar
MD5: b050c93a9bfbcd28546cec7511a82e9a
SHA1: e517b8a93dd9962ed5481345e4d262fdd47c4217
SHA256:804d824c9144561ef85a626e453b90a9ce81c103c3910851e057d79ed84c2e38
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	JBoss by Red Hat	Low
Vendor	jar	package name	jboss	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.jboss.logging	Medium
Vendor	pom	url	http://www.jboss.org	Highest
Vendor	Manifest	implementation-url	http://www.jboss.org	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	automatic-module-name	org.jboss.logging	Medium
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	pom	groupid	org.jboss.logging	Highest
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	file	name	jboss-logging	High
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	pom	groupid	jboss.logging	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	name	JBoss Logging 3	High
Vendor	Manifest	java-vendor	Red Hat, Inc.	Medium
Vendor	Manifest	os-arch	amd64	Low
Vendor	jar	package name	logging	Highest
Vendor	pom	parent-groupid	org.jboss	Medium
Vendor	pom	artifactid	jboss-logging	Low
Product	Manifest	specification-title	JBoss Logging 3	Medium
Product	jar	package name	jboss	Highest
Product	Manifest	Bundle-Name	JBoss Logging 3	Medium
Product	pom	artifactid	jboss-logging	Highest
Product	Manifest	implementation-url	http://www.jboss.org	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	JBoss Logging 3	High
Product	Manifest	automatic-module-name	org.jboss.logging	Medium
Product	Manifest	os-name	Linux	Medium
Product	Manifest	bundle-symbolicname	org.jboss.logging.jboss-logging	Medium
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	file	name	jboss-logging	High
Product	pom	groupid	jboss.logging	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	name	JBoss Logging 3	High
Product	pom	parent-artifactid	jboss-parent	Medium
Product	Manifest	os-arch	amd64	Low
Product	jar	package name	logging	Highest
Product	pom	parent-groupid	org.jboss	Medium
Product	pom	url	http://www.jboss.org	Medium
Version	pom	parent-version	3.4.2.Final	Low
Version	Manifest	Bundle-Version	3.4.2.Final	High
Version	Manifest	Implementation-Version	3.4.2.Final	High
Version	pom	version	3.4.2.Final	Highest

Identifiers

pkg:maven/org.jboss.logging/jboss-logging@3.4.2.Final (Confidence:High)

jboss-transaction-api_1.2_spec-1.1.1.Final.jar

Description:

The Java Transaction 1.2 API classes

License:

Common Development and Distribution License: http://repository.jboss.org/licenses/cddl.txt
GNU General Public License, Version 2 with the Classpath Exception: http://repository.jboss.org/licenses/gpl-2.0-ce.txt

File Path: /home/jenkins/.mvnrepository/org/jboss/spec/javax/transaction/jboss-transaction-api_1.2_spec/1.1.1.Final/jboss-transaction-api_1.2_spec-1.1.1.Final.jar
MD5: 1e633c47138aba999d39692a31a1a124
SHA1: a8485cab9484dda36e9a8c319e76b5cc18797b58
SHA256:a310a50b9bdc44aaf36362dc9bb212235a147ffa8ef72dc9544a39c329eabbc3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Java Transaction API	High
Vendor	Manifest	Implementation-Vendor-Id	org.jboss.spec.javax.transaction	Medium
Vendor	pom	groupid	jboss.spec.javax.transaction	Highest
Vendor	pom	artifactid	jboss-transaction-api_1.2_spec	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	os-arch	x86	Low
Vendor	Manifest	implementation-url	http://www.jboss.org/jboss-transaction-api_1.2_spec	Low
Vendor	hint analyzer	vendor	redhat	Highest
Vendor	Manifest	bundle-docurl	http://www.jboss.org	Low
Vendor	Manifest	Implementation-Vendor	JBoss by Red Hat	High
Vendor	file	name	jboss-transaction-api_1.2_spec-1.1.1.Final	High
Vendor	pom	parent-artifactid	jboss-parent	Low
Vendor	pom	groupid	org.jboss.spec.javax.transaction	Highest
Vendor	jar	package name	transaction	Highest
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	pom	parent-groupid	org.jboss	Medium
Vendor	Manifest	bundle-symbolicname	org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec	Medium
Vendor	jar	package name	javax	Highest
Vendor	Manifest	automatic-module-name	java.transaction	Medium
Vendor	Manifest	os-name	Windows 10	Medium
Product	pom	name	Java Transaction API	High
Product	pom	groupid	jboss.spec.javax.transaction	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	os-arch	x86	Low
Product	Manifest	Bundle-Name	Java Transaction API	Medium
Product	Manifest	implementation-url	http://www.jboss.org/jboss-transaction-api_1.2_spec	Low
Product	Manifest	bundle-docurl	http://www.jboss.org	Low
Product	Manifest	Implementation-Title	Java Transaction API	High
Product	file	name	jboss-transaction-api_1.2_spec-1.1.1.Final	High
Product	Manifest	specification-title	JSR 907: Java Transaction API (JTA)	Medium
Product	pom	parent-artifactid	jboss-parent	Medium
Product	jar	package name	transaction	Highest
Product	pom	parent-groupid	org.jboss	Medium
Product	Manifest	bundle-symbolicname	org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec	Medium
Product	jar	package name	javax	Highest
Product	pom	artifactid	jboss-transaction-api_1.2_spec	Highest
Product	Manifest	automatic-module-name	java.transaction	Medium
Product	Manifest	os-name	Windows 10	Medium
Version	Manifest	Implementation-Version	1.1.1.Final	High
Version	Manifest	Bundle-Version	1.1.1.Final	High
Version	pom	parent-version	1.1.1.Final	Low
Version	pom	version	1.1.1.Final	Highest

Identifiers

pkg:maven/org.jboss.spec.javax.transaction/jboss-transaction-api_1.2_spec@1.1.1.Final (Confidence:High)

jcip-annotations-1.0-1.jar

Description:

    A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256:4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.github.stephenc.jcip	Highest
Vendor	jar	package name	net	Low
Vendor	pom	groupid	github.stephenc.jcip	Highest
Vendor	jar	package name	jcip	Highest
Vendor	jar	package name	jcip	Low
Vendor	pom	name	JCIP Annotations under Apache License	High
Vendor	pom	artifactid	jcip-annotations	Low
Vendor	pom	url	http://stephenc.github.com/jcip-annotations	Highest
Vendor	jar	package name	annotations	Highest
Vendor	jar	package name	annotations	Low
Vendor	file	name	jcip-annotations	High
Product	pom	url	http://stephenc.github.com/jcip-annotations	Medium
Product	pom	groupid	github.stephenc.jcip	Highest
Product	jar	package name	jcip	Highest
Product	jar	package name	jcip	Low
Product	pom	name	JCIP Annotations under Apache License	High
Product	pom	artifactid	jcip-annotations	Highest
Product	jar	package name	annotations	Highest
Product	jar	package name	annotations	Low
Product	file	name	jcip-annotations	High
Version	pom	version	1.0-1	Highest

Identifiers

pkg:maven/com.github.stephenc.jcip/jcip-annotations@1.0-1 (Confidence:High)

jcl-over-slf4j-1.7.32.jar

Description:

JCL 1.2 implemented over SLF4J

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/slf4j/jcl-over-slf4j/1.7.32/jcl-over-slf4j-1.7.32.jar
MD5: 8788169f5d5be6550efc75d3bfffc82c
SHA1: 32c060250bcc5282cdbc1fd7008c12eb4ebad00e
SHA256:60f3bda5922e3912889cca1311d1b227753610bf60cb4e5e914e8b2eaa0326b4
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	pom	name	JCL 1.2 implemented over SLF4J	High
Vendor	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	groupid	slf4j	Highest
Vendor	jar	package name	apache	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	file	name	jcl-over-slf4j	High
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Vendor	pom	artifactid	jcl-over-slf4j	Low
Product	Manifest	Implementation-Title	jcl-over-slf4j	High
Product	pom	parent-groupid	org.slf4j	Medium
Product	pom	name	JCL 1.2 implemented over SLF4J	High
Product	Manifest	automatic-module-name	org.apache.commons.logging	Medium
Product	pom	artifactid	jcl-over-slf4j	Highest
Product	pom	groupid	slf4j	Highest
Product	jar	package name	apache	Highest
Product	Manifest	Bundle-Name	jcl-over-slf4j	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	file	name	jcl-over-slf4j	High
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	bundle-symbolicname	jcl.over.slf4j	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Version	Manifest	Implementation-Version	1.7.32	High
Version	Manifest	Bundle-Version	1.7.32	High
Version	file	version	1.7.32	High
Version	pom	version	1.7.32	Highest

Identifiers

pkg:maven/org.slf4j/jcl-over-slf4j@1.7.32 (Confidence:High)

jna-4.5.1.jar

Description:

Java Native Access

License:

LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
Apache License v2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/java/dev/jna/jna/4.5.1/jna-4.5.1.jar
MD5: 2309aa0981207a1e853dd9c806c44082
SHA1: 65bd0cacc9c79a21c6ed8e9f588577cd3c2f85b9
SHA256:fbc9de96a0cc193a125b4008dbc348e9ed54e5e13fc67b8ed40e645d303cc51b
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	com.sun.jna	Medium
Vendor	jar	package name	native	Highest
Vendor	Manifest	bundle-activationpolicy	lazy	Low
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	jar	package name	jna	Highest
Vendor	pom	url	java-native-access/jna	Highest
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Vendor	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc	Low
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	file	name	jna	High
Vendor	jar	package name	sun	Highest
Vendor	pom	artifactid	jna	Low
Vendor	Manifest	bundle-category	jni	Low
Vendor	pom	name	Java Native Access	High
Vendor	pom	groupid	net.java.dev.jna	Highest
Product	Manifest	bundle-symbolicname	com.sun.jna	Medium
Product	jar	package name	native	Highest
Product	Manifest	bundle-activationpolicy	lazy	Low
Product	jar	package name	jna	Highest
Product	Manifest	Bundle-Name	jna	Medium
Product	jar	package name	library	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Product	jar	package name	win32	Highest
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	Manifest	bundle-nativecode	com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin/libjnidispatch.jnilib; osname=macosx;processor=x86;processor=x86-64;processor=ppc	Low
Product	file	name	jna	High
Product	pom	artifactid	jna	Highest
Product	jar	package name	sun	Highest
Product	Manifest	bundle-category	jni	Low
Product	pom	url	java-native-access/jna	High
Product	Manifest	Implementation-Title	com.sun.jna	High
Product	pom	name	Java Native Access	High
Product	pom	groupid	net.java.dev.jna	Highest
Version	pom	version	4.5.1	Highest
Version	file	version	4.5.1	High
Version	Manifest	Bundle-Version	4.5.1	High

Identifiers

pkg:maven/net.java.dev.jna/jna@4.5.1 (Confidence:High)

jna-4.5.1.jar: jnidispatch.dll

File Path: /home/jenkins/.mvnrepository/net/java/dev/jna/jna/4.5.1/jna-4.5.1.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: 9268651539d1ecbec9e6ed81aeced380
SHA1: a7c725bce11d28000dd49a3717288b098a588c9f
SHA256:67059e9d04131cf85b41b881d214fc745d8e165859dadb7634114e7e96eb6e42
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Identifiers

None

jna-4.5.1.jar: jnidispatch.dll

File Path: /home/jenkins/.mvnrepository/net/java/dev/jna/jna/4.5.1/jna-4.5.1.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 1164914ca1307de98cc0d57e42285ef2
SHA1: 9387f983c88c425c91e5caae2409cf4180b02096
SHA256:0525f9e2db0146f7abcc8cd86cf4fb01721fad0d5c9a1806b5805bb789eb8c98
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Identifiers

None

jna-platform-4.5.1.jar

Description:

Java Native Access Platform

License:

LGPL, version 2.1: http://www.gnu.org/licenses/licenses.html
Apache License v2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/java/dev/jna/jna-platform/4.5.1/jna-platform-4.5.1.jar
MD5: 9c7b0fcb0472ae92b50ce17577e370d1
SHA1: 117d52c9f672d8b7ea80a81464c33ef843de9254
SHA256:84c8667555ee8dd91fef44b451419f6f16f71f727d5fc475a10c2663eba83abb
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	require-bundle	com.sun.jna;bundle-version="4.5.1"	Low
Vendor	Manifest	Implementation-Vendor	JNA Development Team	High
Vendor	jar	package name	platform	Highest
Vendor	jar	package name	jna	Highest
Vendor	pom	url	java-native-access/jna	Highest
Vendor	pom	artifactid	jna-platform	Low
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Vendor	file	name	jna-platform	High
Vendor	pom	name	Java Native Access Platform	High
Vendor	Manifest	specification-vendor	JNA Development Team	Low
Vendor	jar	package name	sun	Highest
Vendor	Manifest	bundle-category	jni	Low
Vendor	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Vendor	pom	groupid	net.java.dev.jna	Highest
Product	Manifest	Implementation-Title	com.sun.jna.platform	High
Product	Manifest	require-bundle	com.sun.jna;bundle-version="4.5.1"	Low
Product	jar	package name	platform	Highest
Product	jar	package name	jna	Highest
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.4	Low
Product	file	name	jna-platform	High
Product	Manifest	specification-title	Java Native Access (JNA)	Medium
Product	pom	name	Java Native Access Platform	High
Product	jar	package name	sun	Highest
Product	Manifest	Bundle-Name	jna-platform	Medium
Product	Manifest	bundle-category	jni	Low
Product	pom	url	java-native-access/jna	High
Product	pom	artifactid	jna-platform	Highest
Product	Manifest	bundle-symbolicname	com.sun.jna.platform	Medium
Product	pom	groupid	net.java.dev.jna	Highest
Version	pom	version	4.5.1	Highest
Version	file	version	4.5.1	High
Version	Manifest	Bundle-Version	4.5.1	High

Identifiers

pkg:maven/net.java.dev.jna/jna-platform@4.5.1 (Confidence:High)

json-path-2.5.0.jar

Description:

Java port of Stefan Goessner JsonPath.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/jayway/jsonpath/json-path/2.5.0/json-path-2.5.0.jar
MD5: c16241d78783e2e2b93429afb4c783aa
SHA1: c35ef29095125b51638d19120f63e2b56eff20e9
SHA256:4ed3c4c2d4e477cb2a349c0ebb8c22f0584702221ddbaafd166fddcd2101029b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	com.jayway.jsonpath	Highest
Vendor	jar	package name	path	Highest
Vendor	jar	package name	json	Highest
Vendor	jar	package name	jsonpath	Highest
Vendor	pom	artifactid	json-path	Low
Vendor	Manifest	bundle-symbolicname	com.jayway.jsonpath.json-path	Medium
Vendor	file	name	json-path	High
Vendor	pom	groupid	jayway.jsonpath	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	project ':json-path'	High
Vendor	pom	url	jayway/JsonPath	Highest
Vendor	jar	package name	jayway	Highest
Product	jar	package name	filter	Highest
Product	Manifest	Implementation-Title	json-path	High
Product	jar	package name	path	Highest
Product	jar	package name	json	Highest
Product	jar	package name	jsonpath	Highest
Product	Manifest	bundle-symbolicname	com.jayway.jsonpath.json-path	Medium
Product	file	name	json-path	High
Product	pom	groupid	jayway.jsonpath	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	name	project ':json-path'	High
Product	Manifest	Bundle-Name	json-path	Medium
Product	pom	url	jayway/JsonPath	High
Product	pom	artifactid	json-path	Highest
Product	jar	package name	jayway	Highest
Version	Manifest	Implementation-Version	2.5.0	High
Version	Manifest	Bundle-Version	2.5.0	High
Version	file	version	2.5.0	High
Version	pom	version	2.5.0	Highest

Identifiers

pkg:maven/com.jayway.jsonpath/json-path@2.5.0 (Confidence:High)

json-smart-2.4.7.jar

Description:

JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language.

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/net/minidev/json-smart/2.4.7/json-smart-2.4.7.jar
MD5: f04005088df03f6efac608a7a5d53cd1
SHA1: 8d7f4c1530c07c54930935f3da85f48b83b3c109
SHA256:28c17ed16ac22e6845743fd1e84321edf5d7735fc216e44ee269d106bf3d8146
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	minidev	Highest
Vendor	jar	package name	json	Highest
Vendor	file	name	json-smart	High
Vendor	pom	organization name	Chemouni Uriel	High
Vendor	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	json-smart	Low
Vendor	jar	package name	parser	Highest
Vendor	Manifest	bundle-docurl	https://urielch.github.io/	Low
Vendor	pom	url	https://urielch.github.io/	Highest
Vendor	pom	name	JSON Small and Fast Parser	High
Vendor	pom	organization url	https://urielch.github.io/	Medium
Vendor	jar	package name	net	Highest
Vendor	pom	groupid	net.minidev	Highest
Product	pom	organization url	https://urielch.github.io/	Low
Product	jar	package name	minidev	Highest
Product	jar	package name	json	Highest
Product	file	name	json-smart	High
Product	Manifest	bundle-symbolicname	net.minidev.json-smart	Medium
Product	pom	url	https://urielch.github.io/	Medium
Product	Manifest	Bundle-Name	json-smart	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	parser	Highest
Product	Manifest	bundle-docurl	https://urielch.github.io/	Low
Product	pom	name	JSON Small and Fast Parser	High
Product	jar	package name	net	Highest
Product	pom	groupid	net.minidev	Highest
Product	pom	artifactid	json-smart	Highest
Product	pom	organization name	Chemouni Uriel	Low
Version	pom	version	2.4.7	Highest
Version	file	version	2.4.7	High
Version	Manifest	Bundle-Version	2.4.7	High

Identifiers

pkg:maven/net.minidev/json-smart@2.4.7 (Confidence:High)
cpe:2.3:a:json_smart_project:json_smart:2.4.7:*:*:*:*:*:*:* (Confidence:Highest)

jsr305-3.0.2.jar

Description:

JSR305 Annotations for Findbugs

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/google/code/findbugs/jsr305/3.0.2/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	jsr305	High
Vendor	Manifest	bundle-symbolicname	org.jsr-305	Medium
Vendor	pom	artifactid	jsr305	Low
Vendor	pom	name	FindBugs-jsr305	High
Vendor	pom	groupid	google.code.findbugs	Highest
Vendor	pom	groupid	com.google.code.findbugs	Highest
Vendor	pom	url	http://findbugs.sourceforge.net/	Highest
Product	Manifest	Bundle-Name	FindBugs-jsr305	Medium
Product	file	name	jsr305	High
Product	Manifest	bundle-symbolicname	org.jsr-305	Medium
Product	pom	name	FindBugs-jsr305	High
Product	pom	artifactid	jsr305	Highest
Product	pom	groupid	google.code.findbugs	Highest
Product	pom	url	http://findbugs.sourceforge.net/	Medium
Version	file	version	3.0.2	High
Version	pom	version	3.0.2	Highest
Version	Manifest	Bundle-Version	3.0.2	High

Identifiers

pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

jul-to-slf4j-1.7.32.jar

Description:

JUL to SLF4J bridge

File Path: /home/jenkins/.mvnrepository/org/slf4j/jul-to-slf4j/1.7.32/jul-to-slf4j-1.7.32.jar
MD5: cf36bbee73d82b6b96a6414ef9f54df1
SHA1: 8a055c04ab44e8e8326901cadf89080721348bdb
SHA256:6dee8d85ad6943aff0600f14897c469e64bae0413ee33a15c448af00432c0642
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	jar	package name	bridge	Highest
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	groupid	slf4j	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	artifactid	jul-to-slf4j	Low
Vendor	jar	package name	slf4j	Highest
Vendor	pom	name	JUL to SLF4J bridge	High
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	file	name	jul-to-slf4j	High
Vendor	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	pom	parent-groupid	org.slf4j	Medium
Product	jar	package name	bridge	Highest
Product	pom	groupid	slf4j	Highest
Product	pom	artifactid	jul-to-slf4j	Highest
Product	Manifest	Bundle-Name	jul-to-slf4j	Medium
Product	jar	package name	slf4j	Highest
Product	pom	url	http://www.slf4j.org	Medium
Product	pom	name	JUL to SLF4J bridge	High
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	file	name	jul-to-slf4j	High
Product	Manifest	bundle-symbolicname	jul.to.slf4j	Medium
Product	pom	parent-artifactid	slf4j-parent	Medium
Version	Manifest	Implementation-Version	1.7.32	High
Version	Manifest	Bundle-Version	1.7.32	High
Version	file	version	1.7.32	High
Version	pom	version	1.7.32	Highest

Identifiers

pkg:maven/org.slf4j/jul-to-slf4j@1.7.32 (Confidence:High)

kubernetes-client-4.7.0.jar

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-client/4.7.0/kubernetes-client-4.7.0.jar
MD5: 1d356d064e8186b15903298b43e6be1d
SHA1: 12547e58b775e415157315048224be39e3944afa
SHA256:b30d0b9908d4e3f9f6a050d05e568de892f9616de4fecdac131fde3e246bf3c7
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	kubernetes-client	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	file	name	kubernetes-client	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Fabric8 :: Kubernetes :: Java Client	High
Vendor	jar	package name	client	Highest
Vendor	pom	parent-artifactid	kubernetes-client-project	Low
Vendor	jar	package name	fabric8	Highest
Product	pom	artifactid	kubernetes-client	Highest
Product	jar	package name	kubernetes	Highest
Product	pom	parent-artifactid	kubernetes-client-project	Medium
Product	jar	package name	io	Highest
Product	pom	groupid	io.fabric8	Highest
Product	file	name	kubernetes-client	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Fabric8 :: Kubernetes :: Java Client	High
Product	jar	package name	client	Highest
Product	jar	package name	fabric8	Highest
Version	file	version	4.7.0	High
Version	pom	version	4.7.0	Highest

Identifiers

pkg:maven/io.fabric8/kubernetes-client@4.7.0 (Confidence:High)
cpe:2.3:a:kubernetes:java:4.7.0:*:*:*:*:*:*:* (Confidence:Low)

kubernetes-model-4.7.0.jar

Description:

Java client for Kubernetes and OpenShift

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-model/4.7.0/kubernetes-model-4.7.0.jar
MD5: 87609db8395ebd5136763394a11eb8fc
SHA1: cf4831621a7f61deb5e87c9390ef7b970f16d909
SHA256:1ecfcd2bfd4ddfe457723af295ef5ec7231f02aafb9c8799fa7fb73d446411fe
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	kubernetes-model-generator	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Red Hat	High
Vendor	file	name	kubernetes-model	High
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	Manifest	bundle-docurl	http://redhat.com	Low
Vendor	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model/	Low
Vendor	jar	package name	fabric8	Highest
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	Red Hat	Low
Vendor	pom	artifactid	kubernetes-model	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	Fabric8 :: Kubernetes Model	High
Vendor	Manifest	build-timestamp	${build.datetime}	Low
Vendor	Manifest	bundle-symbolicname	io.fabric8.kubernetes-model	Medium
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	Implementation-Vendor-Id	io.fabric8	Medium
Product	jar	package name	openshift	Highest
Product	jar	package name	kubernetes	Highest
Product	file	name	kubernetes-model	High
Product	jar	package name	io	Highest
Product	Manifest	bundle-docurl	http://redhat.com	Low
Product	pom	groupid	io.fabric8	Highest
Product	pom	parent-artifactid	kubernetes-model-generator	Medium
Product	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model/	Low
Product	Manifest	Implementation-Title	Fabric8 :: Kubernetes Model	High
Product	jar	package name	fabric8	Highest
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	Fabric8 :: Kubernetes Model	Medium
Product	pom	artifactid	kubernetes-model	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	Fabric8 :: Kubernetes Model	Medium
Product	pom	name	Fabric8 :: Kubernetes Model	High
Product	Manifest	build-timestamp	${build.datetime}	Low
Product	Manifest	bundle-symbolicname	io.fabric8.kubernetes-model	Medium
Product	Manifest	os-arch	amd64	Low
Version	file	version	4.7.0	High
Version	Manifest	Bundle-Version	4.7.0	High
Version	Manifest	Implementation-Version	4.7.0	High
Version	pom	version	4.7.0	Highest

Identifiers

pkg:maven/io.fabric8/kubernetes-model@4.7.0 (Confidence:High)
cpe:2.3:a:kubernetes:java:4.7.0:*:*:*:*:*:*:* (Confidence:Low)
cpe:2.3:a:oracle:java_se:4.7.0:*:*:*:*:*:*:* (Confidence:Low)

kubernetes-model-common-4.7.0.jar

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-model-common/4.7.0/kubernetes-model-common-4.7.0.jar
MD5: 1845c2fd17622c1f9980ddbf3183e84e
SHA1: 38e88a4bdf0d4a77089927494aa60358b8b66455
SHA256:b5bdb86d95feba870016a67304f822a26112db7c30eb4bc656ef502a44a660f3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	build-timestamp	Wed, 8 Jan 2020 13:20:45 +0000	Low
Vendor	pom	parent-artifactid	kubernetes-model-generator	Low
Vendor	pom	artifactid	kubernetes-model-common	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Red Hat	High
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model-common/	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Fabric8 :: Kubernetes Model :: Common	High
Vendor	jar	package name	fabric8	Highest
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	Red Hat	Low
Vendor	jar	package name	model	Highest
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	file	name	kubernetes-model-common	High
Product	Manifest	build-timestamp	Wed, 8 Jan 2020 13:20:45 +0000	Low
Product	pom	artifactid	kubernetes-model-common	Highest
Product	jar	package name	kubernetes	Highest
Product	jar	package name	io	Highest
Product	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model-common/	Low
Product	pom	groupid	io.fabric8	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	parent-artifactid	kubernetes-model-generator	Medium
Product	pom	name	Fabric8 :: Kubernetes Model :: Common	High
Product	jar	package name	fabric8	Highest
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	Fabric8 :: Kubernetes Model :: Common	Medium
Product	Manifest	Implementation-Title	Fabric8 :: Kubernetes Model :: Common	High
Product	jar	package name	model	Highest
Product	Manifest	os-arch	amd64	Low
Product	file	name	kubernetes-model-common	High
Version	file	version	4.7.0	High
Version	Manifest	Implementation-Version	4.7.0	High
Version	pom	version	4.7.0	Highest

Identifiers

pkg:maven/io.fabric8/kubernetes-model-common@4.7.0 (Confidence:High)

lang-tag-1.5.jar

Description:

Java implementation of "Tags for Identifying Languages" (RFC 5646).

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/nimbusds/lang-tag/1.5/lang-tag-1.5.jar
MD5: ac21831d870da5d2d7be17711aa3229b
SHA1: 7e82e3c4c593f85addf4bd209abde4f8ff933a07
SHA256:761c5b2bf99cd8c611badf013e79435fd571c4464d9d7243b78d70ba955743c9
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lang-tag	High
Vendor	Manifest	bundle-symbolicname	lang-tag	Medium
Vendor	Manifest	specification-vendor	Connect2id Ltd.	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	build-number	${buildNumber}	Low
Vendor	Manifest	Implementation-Vendor-Id	com.nimbusds	Medium
Vendor	pom	organization url	https://connect2id.com/	Medium
Vendor	Manifest	build-tag	1.5	Low
Vendor	pom	groupid	com.nimbusds	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	nimbusds	Highest
Vendor	pom	name	Nimbus LangTag	High
Vendor	Manifest	Implementation-Vendor	Connect2id Ltd.	High
Vendor	Manifest	build-date	${timestamp}	Low
Vendor	Manifest	bundle-docurl	https://connect2id.com/	Low
Vendor	pom	artifactid	lang-tag	Low
Vendor	pom	groupid	nimbusds	Highest
Vendor	jar	package name	langtag	Highest
Vendor	pom	url	https://bitbucket.org/connect2id/nimbus-language-tags	Highest
Vendor	pom	organization name	Connect2id Ltd.	High
Product	file	name	lang-tag	High
Product	Manifest	bundle-symbolicname	lang-tag	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	build-number	${buildNumber}	Low
Product	pom	url	https://bitbucket.org/connect2id/nimbus-language-tags	Medium
Product	Manifest	build-tag	1.5	Low
Product	Manifest	Bundle-Name	Nimbus LangTag	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	nimbusds	Highest
Product	pom	organization name	Connect2id Ltd.	Low
Product	pom	name	Nimbus LangTag	High
Product	Manifest	Implementation-Title	Nimbus LangTag	High
Product	pom	artifactid	lang-tag	Highest
Product	Manifest	build-date	${timestamp}	Low
Product	Manifest	bundle-docurl	https://connect2id.com/	Low
Product	pom	organization url	https://connect2id.com/	Low
Product	Manifest	specification-title	Nimbus LangTag	Medium
Product	pom	groupid	nimbusds	Highest
Product	jar	package name	langtag	Highest
Version	Manifest	Implementation-Version	1.5	High
Version	Manifest	build-tag	1.5	Low
Version	pom	version	1.5	Highest
Version	file	version	1.5	High

Identifiers

pkg:maven/com.nimbusds/lang-tag@1.5 (Confidence:High)
cpe:2.3:a:nim-lang:nim-lang:1.5:*:*:*:*:*:*:* (Confidence:High)

liquibase-core-4.3.1.jar

Description:

Liquibase is a tool for managing and executing database changes.

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/liquibase/liquibase-core/4.3.1/liquibase-core-4.3.1.jar
MD5: dc9c65331a39875a7666e1bfbe135794
SHA1: 561fbeb857d07fc15adf13656277834b3f2e33d6
SHA256:291d2c032f1f1c69e946e938c6b44d296bcaa4ef91d8d1f36b1728d47a91ce6b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	liquibase-core	Low
Vendor	pom	url	http://www.liquibase.org/liquibase-root/liquibase-dist	Highest
Vendor	Manifest	build-time	2021-02-12 17:41+0000	Low
Vendor	pom	groupid	org.liquibase	Highest
Vendor	jar	package name	is	Highest
Vendor	Manifest	bundle-symbolicname	org.liquibase.core	Medium
Vendor	jar	package name	core	Highest
Vendor	jar	package name	liquibase	Highest
Vendor	pom	name	Liquibase	High
Vendor	pom	groupid	liquibase	Highest
Vendor	Manifest	bundle-docurl	http://www.liquibase.org	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	build-number	26	Low
Vendor	jar	package name	database	Highest
Vendor	file	name	liquibase-core	High
Product	jar	package name	filter	Highest
Product	Manifest	build-time	2021-02-12 17:41+0000	Low
Product	jar	package name	is	Highest
Product	Manifest	bundle-symbolicname	org.liquibase.core	Medium
Product	jar	package name	core	Highest
Product	Manifest	Bundle-Name	liquibase-core	Medium
Product	pom	artifactid	liquibase-core	Highest
Product	jar	package name	liquibase	Highest
Product	pom	name	Liquibase	High
Product	pom	url	http://www.liquibase.org/liquibase-root/liquibase-dist	Medium
Product	pom	groupid	liquibase	Highest
Product	Manifest	bundle-docurl	http://www.liquibase.org	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	build-number	26	Low
Product	jar	package name	database	Highest
Product	file	name	liquibase-core	High
Product	jar	package name	ee	Highest
Version	Manifest	liquibase-version	4.3.1	Medium
Version	Manifest	Bundle-Version	4.3.1	High
Version	file	version	4.3.1	High
Version	pom	version	4.3.1	Highest

Identifiers

pkg:maven/org.liquibase/liquibase-core@4.3.1 (Confidence:High)

log4j-api-2.13.2.jar

Description:

The Apache Log4j API

License:

https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/logging/log4j/log4j-api/2.13.2/log4j-api-2.13.2.jar
MD5: 06bddceaba5261c0b3370e497248c5b3
SHA1: 567ea514dedd8679c429c5b5b39b0d67b6464c3c
SHA256:4dd502df82236031b8d32a243e6b210a6b9517333d9fe8116130e7743b6c038f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	log4jreleasekey	B3D8E1BA	Low
Vendor	jar	package name	log4j	Highest
Vendor	pom	artifactid	log4j-api	Low
Vendor	Manifest	specification-vendor	The Apache Software Foundation	Low
Vendor	file	name	log4j-api	High
Vendor	Manifest	Implementation-Vendor-Id	org.apache.logging.log4j	Medium
Vendor	jar	package name	org	Highest
Vendor	jar	package name	apache	Highest
Vendor	Manifest	log4jreleasemanager	Ralph Goers	Low
Vendor	pom	groupid	apache.logging.log4j	Highest
Vendor	Manifest	bundle-docurl	https://www.apache.org/	Low
Vendor	Manifest	Implementation-Vendor	The Apache Software Foundation	High
Vendor	pom	name	Apache Log4j API	High
Vendor	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Vendor	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	parent-artifactid	log4j	Low
Vendor	pom	groupid	org.apache.logging.log4j	Highest
Vendor	jar	package name	logging	Highest
Vendor	Manifest	multi-release	true	Low
Vendor	pom	parent-groupid	org.apache.logging.log4j	Medium
Product	Manifest	log4jreleasekey	B3D8E1BA	Low
Product	jar	package name	log4j	Highest
Product	pom	artifactid	log4j-api	Highest
Product	file	name	log4j-api	High
Product	Manifest	Implementation-Title	Apache Log4j API	High
Product	jar	package name	org	Highest
Product	jar	package name	apache	Highest
Product	Manifest	log4jreleasemanager	Ralph Goers	Low
Product	pom	groupid	apache.logging.log4j	Highest
Product	Manifest	Bundle-Name	Apache Log4j API	Medium
Product	Manifest	bundle-docurl	https://www.apache.org/	Low
Product	pom	parent-artifactid	log4j	Medium
Product	pom	name	Apache Log4j API	High
Product	Manifest	implementation-url	https://logging.apache.org/log4j/2.x/log4j-api/	Low
Product	Manifest	bundle-symbolicname	org.apache.logging.log4j.api	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	logging	Highest
Product	Manifest	specification-title	Apache Log4j API	Medium
Product	Manifest	multi-release	true	Low
Product	pom	parent-groupid	org.apache.logging.log4j	Medium
Version	Manifest	log4jreleaseversion	2.13.2	Medium
Version	file	version	2.13.2	High
Version	pom	version	2.13.2	Highest
Version	Manifest	Implementation-Version	2.13.2	High
Version	Manifest	Bundle-Version	2.13.2	High

Identifiers

pkg:maven/org.apache.logging.log4j/log4j-api@2.13.2 (Confidence:High)
cpe:2.3:a:apache:log4j:2.13.2:*:*:*:*:*:*:* (Confidence:Highest)

logback-classic-1.2.4.jar

Description:

logback-classic module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /home/jenkins/.mvnrepository/ch/qos/logback/logback-classic/1.2.4/logback-classic-1.2.4.jar
MD5: 8ae2181c260219f11240f45693d20d83
SHA1: f3bc99fd0b226065012b24fe9f808299048bab54
SHA256:2157cc3ce4fa1b6aae8a0cc3c1613c612b4ecc6765bc0c34f3a457e06a757614
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	jar	package name	classic	Highest
Vendor	file	name	logback-classic	High
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.classic	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	pom	parent-artifactid	logback-parent	Low
Vendor	jar	package name	ch	Highest
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	jar	package name	qos	Highest
Vendor	pom	name	Logback Classic Module	High
Vendor	jar	package name	logback	Highest
Vendor	pom	artifactid	logback-classic	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	jar	package name	classic	Highest
Product	pom	groupid	ch.qos.logback	Highest
Product	file	name	logback-classic	High
Product	Manifest	bundle-symbolicname	ch.qos.logback.classic	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	jar	package name	ch	Highest
Product	pom	artifactid	logback-classic	Highest
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	pom	parent-artifactid	logback-parent	Medium
Product	jar	package name	qos	Highest
Product	pom	name	Logback Classic Module	High
Product	Manifest	Bundle-Name	Logback Classic Module	Medium
Product	jar	package name	logback	Highest
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Version	pom	version	1.2.4	Highest
Version	Manifest	Bundle-Version	1.2.4	High
Version	file	version	1.2.4	High

Identifiers

pkg:maven/ch.qos.logback/logback-classic@1.2.4 (Confidence:High)
cpe:2.3:a:qos:logback:1.2.4:*:*:*:*:*:*:* (Confidence:Highest)

logback-core-1.2.4.jar

Description:

logback-core module

License:

http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html

File Path: /home/jenkins/.mvnrepository/ch/qos/logback/logback-core/1.2.4/logback-core-1.2.4.jar
MD5: 2af672f40145b4849e7cc6c815fd75a1
SHA1: 5f429ee58dbacf9040f846f1218c36ca6e851596
SHA256:98d52c6c5846b6221351a706111f500bcc5ebae1a266f669b623cc1fc99574fa
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	logback-core	High
Vendor	pom	groupid	ch.qos.logback	Highest
Vendor	pom	name	Logback Core Module	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	jar	package name	core	Highest
Vendor	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Vendor	Manifest	bundle-docurl	http://www.qos.ch	Low
Vendor	pom	parent-artifactid	logback-parent	Low
Vendor	jar	package name	ch	Highest
Vendor	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Vendor	jar	package name	qos	Highest
Vendor	jar	package name	logback	Highest
Vendor	pom	artifactid	logback-core	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Product	file	name	logback-core	High
Product	pom	groupid	ch.qos.logback	Highest
Product	pom	name	Logback Core Module	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	Bundle-Name	Logback Core Module	Medium
Product	jar	package name	core	Highest
Product	Manifest	bundle-symbolicname	ch.qos.logback.core	Medium
Product	Manifest	bundle-docurl	http://www.qos.ch	Low
Product	pom	artifactid	logback-core	Highest
Product	jar	package name	ch	Highest
Product	Manifest	originally-created-by	Apache Maven Bundle Plugin	Low
Product	pom	parent-artifactid	logback-parent	Medium
Product	jar	package name	qos	Highest
Product	jar	package name	logback	Highest
Product	Manifest	bundle-requiredexecutionenvironment	JavaSE-1.6	Low
Version	pom	version	1.2.4	Highest
Version	Manifest	Bundle-Version	1.2.4	High
Version	file	version	1.2.4	High

Identifiers

pkg:maven/ch.qos.logback/logback-core@1.2.4 (Confidence:High)
cpe:2.3:a:qos:logback:1.2.4:*:*:*:*:*:*:* (Confidence:Highest)

logging-interceptor-3.14.9.jar

File Path: /home/jenkins/.mvnrepository/com/squareup/okhttp3/logging-interceptor/3.14.9/logging-interceptor-3.14.9.jar
MD5: a4a7a01e41cdfd68ce6d9090c38102d2
SHA1: 7358b6fa1d6c1c8b8c01cb05acd74dbe6d680fb1
SHA256:68346e3613fcdb572427e2ed6b826582b174db3e20f84f485bc56f3923e2d4c5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	okhttp3.logging	Medium
Vendor	pom	parent-groupid	com.squareup.okhttp3	Medium
Vendor	pom	groupid	squareup.okhttp3	Highest
Vendor	jar	package name	okhttp3	Highest
Vendor	jar	package name	logging	Highest
Vendor	pom	artifactid	logging-interceptor	Low
Vendor	pom	groupid	com.squareup.okhttp3	Highest
Vendor	file	name	logging-interceptor	High
Vendor	pom	name	OkHttp Logging Interceptor	High
Vendor	pom	parent-artifactid	parent	Low
Product	Manifest	automatic-module-name	okhttp3.logging	Medium
Product	pom	parent-groupid	com.squareup.okhttp3	Medium
Product	pom	artifactid	logging-interceptor	Highest
Product	pom	groupid	squareup.okhttp3	Highest
Product	jar	package name	okhttp3	Highest
Product	pom	parent-artifactid	parent	Medium
Product	jar	package name	logging	Highest
Product	file	name	logging-interceptor	High
Product	pom	name	OkHttp Logging Interceptor	High
Version	file	version	3.14.9	High
Version	pom	version	3.14.9	Highest

Identifiers

pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.9 (Confidence:High)
cpe:2.3:a:squareup:okhttp:3.14.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:squareup:okhttp3:3.14.9:*:*:*:*:*:*:* (Confidence:Highest)

lombok-1.18.20.jar

Description:

Spice up your java: Automatic Resource Management, automatic generation of getters, setters, equals, hashCode and toString, and more!

License:

The MIT License: https://projectlombok.org/LICENSE

File Path: /home/jenkins/.mvnrepository/org/projectlombok/lombok/1.18.20/lombok-1.18.20.jar
MD5: e863b4be4fe03d2da763679ba1a9079b
SHA1: 18bcea7d5df4d49227b4a0743a536208ce4825bb
SHA256:ce947be6c2fbe759fbbe8ef3b42b6825f814c98c8853f1013f2d9630cedf74b0
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.projectlombok	Highest
Vendor	jar	package name	java	Highest
Vendor	Manifest	can-redefine-classes	true	Low
Vendor	Manifest	automatic-module-name	lombok	Medium
Vendor	file	name	lombok	High
Vendor	pom	name	Project Lombok	High
Vendor	pom	groupid	projectlombok	Highest
Vendor	jar	package name	lombok	Highest
Vendor	jar	package name	tostring	Highest
Vendor	pom	artifactid	lombok	Low
Vendor	pom	url	https://projectlombok.org	Highest
Product	jar	package name	java	Highest
Product	pom	url	https://projectlombok.org	Medium
Product	Manifest	can-redefine-classes	true	Low
Product	Manifest	automatic-module-name	lombok	Medium
Product	file	name	lombok	High
Product	pom	name	Project Lombok	High
Product	pom	artifactid	lombok	Highest
Product	pom	groupid	projectlombok	Highest
Product	jar	package name	lombok	Highest
Product	jar	package name	tostring	Highest
Version	pom	version	1.18.20	Highest
Version	file	version	1.18.20	High
Version	Manifest	lombok-version	1.18.20	Medium

Identifiers

pkg:maven/org.projectlombok/lombok@1.18.20 (Confidence:High)

micrometer-core-1.7.2.jar

Description:

Application monitoring instrumentation facade

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/io/micrometer/micrometer-core/1.7.2/micrometer-core-1.7.2.jar
MD5: d380ad20e7d0605bc24bdc94e0a6695b
SHA1: ca143b470d600dec44073a8f792af7c6ef7c2027
SHA256:8c63cab4c5f8f7df25af6e4c15fcab151df2fb1188b37197923acbb9bfb409da
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	module-source	/micrometer-core	Low
Vendor	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Vendor	pom	name	micrometer-core	High
Vendor	Manifest	build-host	2d2929788788	Low
Vendor	jar	package name	io	Highest
Vendor	Manifest	build-number	9699	Low
Vendor	jar	package name	core	Highest
Vendor	Manifest	full-change	27fbc7cc37d9dad47a41f9014ade40f16f9aa1c7	Low
Vendor	Manifest	module-email	tludwig@vmware.com	Low
Vendor	Manifest	build-job	deploy	Low
Vendor	file	name	micrometer-core	High
Vendor	pom	url	micrometer-metrics/micrometer	Highest
Vendor	Manifest	built-os	Linux	Low
Vendor	Manifest	module-owner	tludwig@vmware.com	Low
Vendor	Manifest	change	27fbc7c	Low
Vendor	Manifest	branch	27fbc7cc37d9dad47a41f9014ade40f16f9aa1c7	Low
Vendor	jar	package name	micrometer	Highest
Vendor	Manifest	build-date	2021-07-14_19:38:28	Low
Vendor	pom	artifactid	micrometer-core	Low
Vendor	Manifest	built-status	integration	Low
Vendor	Manifest	automatic-module-name	micrometer.core	Medium
Vendor	pom	groupid	io.micrometer	Highest
Product	Manifest	module-source	/micrometer-core	Low
Product	Manifest	module-origin	micrometer-metrics/micrometer.git	Low
Product	pom	name	micrometer-core	High
Product	Manifest	build-host	2d2929788788	Low
Product	jar	package name	io	Highest
Product	Manifest	build-number	9699	Low
Product	jar	package name	core	Highest
Product	Manifest	full-change	27fbc7cc37d9dad47a41f9014ade40f16f9aa1c7	Low
Product	Manifest	module-email	tludwig@vmware.com	Low
Product	Manifest	build-job	deploy	Low
Product	pom	artifactid	micrometer-core	Highest
Product	file	name	micrometer-core	High
Product	Manifest	built-os	Linux	Low
Product	pom	url	micrometer-metrics/micrometer	High
Product	Manifest	module-owner	tludwig@vmware.com	Low
Product	Manifest	change	27fbc7c	Low
Product	Manifest	branch	27fbc7cc37d9dad47a41f9014ade40f16f9aa1c7	Low
Product	jar	package name	micrometer	Highest
Product	Manifest	build-date	2021-07-14_19:38:28	Low
Product	Manifest	built-status	integration	Low
Product	Manifest	automatic-module-name	micrometer.core	Medium
Product	Manifest	Implementation-Title	io.micrometer#micrometer-core;1.7.2	High
Product	pom	groupid	io.micrometer	Highest
Version	pom	version	1.7.2	Highest
Version	file	version	1.7.2	High
Version	Manifest	Implementation-Version	1.7.2	High

Identifiers

pkg:maven/io.micrometer/micrometer-core@1.7.2 (Confidence:High)

mockito-core-3.9.0.jar

Description:

Mockito mock objects library core API and implementation

License:

The MIT License: https://github.com/mockito/mockito/blob/release/3.x/LICENSE

File Path: /home/jenkins/.mvnrepository/org/mockito/mockito-core/3.9.0/mockito-core-3.9.0.jar
MD5: 7be1c7a292d83b3eafb38f39048c3fb7
SHA1: b7573430aea743b26434b44f4f46272af613e660
SHA256:a1f64211407b8dc4cf80b16e07cc11aa9e5228d53dc4a5357326d66825f6a4ac
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	mockito	Highest
Vendor	file	name	mockito-core	High
Vendor	Manifest	automatic-module-name	org.mockito	Medium
Vendor	Manifest	bundle-symbolicname	org.mockito.mockito-core	Medium
Vendor	jar	package name	api	Highest
Vendor	pom	name	mockito-core	High
Vendor	jar	package name	and	Highest
Vendor	pom	url	mockito/mockito	Highest
Vendor	pom	groupid	mockito	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	groupid	org.mockito	Highest
Vendor	pom	artifactid	mockito-core	Low
Product	jar	package name	mockito	Highest
Product	file	name	mockito-core	High
Product	Manifest	automatic-module-name	org.mockito	Medium
Product	Manifest	bundle-symbolicname	org.mockito.mockito-core	Medium
Product	jar	package name	api	Highest
Product	pom	name	mockito-core	High
Product	jar	package name	and	Highest
Product	pom	groupid	mockito	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	mockito-core	Highest
Product	pom	url	mockito/mockito	High
Product	Manifest	Bundle-Name	Mockito Mock Library for Java. Core bundle requires Byte Buddy and Objenesis.	Medium
Version	Manifest	Bundle-Version	3.9.0	High
Version	pom	version	3.9.0	Highest
Version	file	version	3.9.0	High

Identifiers

pkg:maven/org.mockito/mockito-core@3.9.0 (Confidence:High)

mysql-connector-java-8.0.26.jar

Description:

JDBC Type 4 driver for MySQL

License:

The GNU General Public License, v2 with FOSS exception

File Path: /home/jenkins/.mvnrepository/mysql/mysql-connector-java/8.0.26/mysql-connector-java-8.0.26.jar
MD5: 13dc40cb6af41385e341539fd0b39f33
SHA1: e5ec6610020a3084b7d32ee725d1650176f6b3de
SHA256:3e1dddd5fdbcd78a552a8fc915fcb804e4f7f83a873355972a3c97a22556f62c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	jar	package name	type	Highest
Vendor	Manifest	Implementation-Vendor-Id	com.mysql	Medium
Vendor	pom	name	MySQL Connector/J	High
Vendor	file	name	mysql-connector-java	High
Vendor	pom	organization name	Oracle Corporation	High
Vendor	pom	organization url	http://www.oracle.com	Medium
Vendor	hint analyzer	vendor	oracle	Highest
Vendor	Manifest	Implementation-Vendor	Oracle	High
Vendor	pom	groupid	mysql	Highest
Vendor	pom	artifactid	mysql-connector-java	Low
Vendor	pom	url	http://dev.mysql.com/doc/connector-j/en/	Highest
Vendor	Manifest (hint)	Implementation-Vendor	sun	High
Vendor	jar	package name	driver	Highest
Vendor	jar	package name	mysql	Highest
Vendor	Manifest	bundle-symbolicname	com.mysql.cj	Medium
Vendor	jar	package name	cj	Highest
Vendor	jar	package name	jdbc	Highest
Vendor	hint analyzer (hint)	vendor	sun	Highest
Product	Manifest	Bundle-Name	Oracle Corporation's JDBC and XDevAPI Driver for MySQL	Medium
Product	pom	organization url	http://www.oracle.com	Low
Product	pom	artifactid	mysql-connector-java	Highest
Product	jar	package name	type	Highest
Product	jar	package name	xdevapi	Highest
Product	pom	name	MySQL Connector/J	High
Product	file	name	mysql-connector-java	High
Product	hint analyzer	product	mysql_connectors	Highest
Product	Manifest	specification-title	JDBC	Medium
Product	pom	url	http://dev.mysql.com/doc/connector-j/en/	Medium
Product	pom	groupid	mysql	Highest
Product	jar	package name	driver	Highest
Product	hint analyzer	product	mysql_connector/j	Highest
Product	jar	package name	mysql	Highest
Product	Manifest	bundle-symbolicname	com.mysql.cj	Medium
Product	jar	package name	cj	Highest
Product	jar	package name	jdbc	Highest
Product	hint analyzer	product	mysql_connector_j	Highest
Product	Manifest	Implementation-Title	MySQL Connector/J	High
Product	pom	organization name	Oracle Corporation	Low
Version	Manifest	Implementation-Version	8.0.26	High
Version	Manifest	Bundle-Version	8.0.26	High
Version	pom	version	8.0.26	Highest
Version	file	version	8.0.26	High

Identifiers

pkg:maven/mysql/mysql-connector-java@8.0.26 (Confidence:High)
cpe:2.3:a:mysql:mysql:8.0.26:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:oracle:mysql_connector\/j:8.0.26:*:*:*:*:*:*:* (Confidence:Highest)

nimbus-jose-jwt-9.10.jar

Description:

        Java library for Javascript Object Signing and Encryption (JOSE) and
        JSON Web Tokens (JWT)

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/nimbusds/nimbus-jose-jwt/9.10/nimbus-jose-jwt-9.10.jar
MD5: eb0af63ddf045fa63476922f22a34037
SHA1: 9735ead6c97a8c7e43e414bfcb85eb40cae0f8ed
SHA256:efb7414056fc4f2d9b7ec148de23275acd3f67c80aeee189a470514c5a999aad
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	nimbus-jose-jwt	Low
Vendor	Manifest	specification-vendor	Connect2id Ltd.	Low
Vendor	Manifest	implementation-url	https://bitbucket.org/connect2id/nimbus-jose-jwt	Low
Vendor	Manifest	build-number	${buildNumber}	Low
Vendor	Manifest	Implementation-Vendor-Id	com.nimbusds	Medium
Vendor	jar	package name	json	Highest
Vendor	pom	url	https://bitbucket.org/connect2id/nimbus-jose-jwt	Highest
Vendor	pom	groupid	com.nimbusds	Highest
Vendor	pom	organization url	https://connect2id.com	Medium
Vendor	jar	package name	nimbusds	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	Manifest	Implementation-Vendor	Connect2id Ltd.	High
Vendor	Manifest	build-date	${timestamp}	Low
Vendor	jar	package name	jose	Highest
Vendor	Manifest	automatic-module-name	com.nimbusds.jose.jwt	Medium
Vendor	jar	package name	jwt	Highest
Vendor	pom	name	Nimbus JOSE+JWT	High
Vendor	file	name	nimbus-jose-jwt	High
Vendor	Manifest	build-tag	9.10	Low
Vendor	pom	groupid	nimbusds	Highest
Vendor	Manifest	bundle-symbolicname	com.nimbusds.nimbus-jose-jwt	Medium
Vendor	Manifest	bundle-docurl	https://connect2id.com	Low
Vendor	pom	organization name	Connect2id Ltd.	High
Product	pom	artifactid	nimbus-jose-jwt	Highest
Product	pom	organization url	https://connect2id.com	Low
Product	Manifest	implementation-url	https://bitbucket.org/connect2id/nimbus-jose-jwt	Low
Product	Manifest	build-number	${buildNumber}	Low
Product	jar	package name	json	Highest
Product	jar	package name	nimbusds	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	Manifest	Implementation-Title	Nimbus JOSE+JWT	High
Product	pom	organization name	Connect2id Ltd.	Low
Product	Manifest	build-date	${timestamp}	Low
Product	jar	package name	jose	Highest
Product	Manifest	automatic-module-name	com.nimbusds.jose.jwt	Medium
Product	jar	package name	jwt	Highest
Product	Manifest	Bundle-Name	Nimbus JOSE+JWT	Medium
Product	pom	name	Nimbus JOSE+JWT	High
Product	file	name	nimbus-jose-jwt	High
Product	Manifest	specification-title	Nimbus JOSE+JWT	Medium
Product	pom	url	https://bitbucket.org/connect2id/nimbus-jose-jwt	Medium
Product	Manifest	build-tag	9.10	Low
Product	pom	groupid	nimbusds	Highest
Product	Manifest	bundle-symbolicname	com.nimbusds.nimbus-jose-jwt	Medium
Product	Manifest	bundle-docurl	https://connect2id.com	Low
Version	file	version	9.10	High
Version	pom	version	9.10	Highest
Version	Manifest	build-tag	9.10	Low
Version	Manifest	Implementation-Version	9.10	High

Identifiers

pkg:maven/com.nimbusds/nimbus-jose-jwt@9.10 (Confidence:High)
cpe:2.3:a:connect2id:nimbus_jose\+jwt:9.10:*:*:*:*:*:*:* (Confidence:Highest)

oauth2-oidc-sdk-9.9.jar

Description:

		OAuth 2.0 SDK with OpenID Connection extensions for developing
		client and server applications.

License:

Apache License, version 2.0: https://www.apache.org/licenses/LICENSE-2.0.html‎

File Path: /home/jenkins/.mvnrepository/com/nimbusds/oauth2-oidc-sdk/9.9/oauth2-oidc-sdk-9.9.jar
MD5: 4e0f2794016648da2b6a9e62b4f8c029
SHA1: bdcd983f299a57aa61b11334f091958d3a4ff7f4
SHA256:f5b6f4da9647a3c90630c508adcbf5bd59d7e2ee366b093a74e0e6b276605c78
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	implementation-url	https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	pom	name	OAuth 2.0 SDK with OpenID Connect extensions	High
Vendor	Manifest	Implementation-Vendor	Connect2id Ltd.	High
Vendor	pom	url	https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions	Highest
Vendor	Manifest	bundle-docurl	https://connect2id.com	Low
Vendor	Manifest	build-tag	9.9	Low
Vendor	Manifest	bundle-symbolicname	oauth2-oidc-sdk	Medium
Vendor	Manifest	specification-vendor	Connect2id Ltd.	Low
Vendor	file	name	oauth2-oidc-sdk	High
Vendor	Manifest	build-number	${buildNumber}	Low
Vendor	Manifest	Implementation-Vendor-Id	com.nimbusds	Medium
Vendor	pom	groupid	com.nimbusds	Highest
Vendor	jar	package name	oauth2	Highest
Vendor	pom	organization url	https://connect2id.com	Medium
Vendor	jar	package name	nimbusds	Highest
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	jar	package name	sdk	Highest
Vendor	jar	package name	openid	Highest
Vendor	Manifest	build-date	${timestamp}	Low
Vendor	pom	artifactid	oauth2-oidc-sdk	Low
Vendor	jar	package name	connect	Highest
Vendor	pom	groupid	nimbusds	Highest
Vendor	jar	package name	client	Highest
Vendor	pom	organization name	Connect2id Ltd.	High
Product	Manifest	Bundle-Name	OAuth 2.0 SDK with OpenID Connect extensions	Medium
Product	Manifest	implementation-url	https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions	Low
Product	pom	organization url	https://connect2id.com	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	pom	name	OAuth 2.0 SDK with OpenID Connect extensions	High
Product	pom	artifactid	oauth2-oidc-sdk	Highest
Product	Manifest	Implementation-Title	OAuth 2.0 SDK with OpenID Connect extensions	High
Product	Manifest	bundle-docurl	https://connect2id.com	Low
Product	Manifest	build-tag	9.9	Low
Product	Manifest	bundle-symbolicname	oauth2-oidc-sdk	Medium
Product	Manifest	specification-title	OAuth 2.0 SDK with OpenID Connect extensions	Medium
Product	file	name	oauth2-oidc-sdk	High
Product	Manifest	build-number	${buildNumber}	Low
Product	jar	package name	oauth2	Highest
Product	jar	package name	nimbusds	Highest
Product	pom	organization name	Connect2id Ltd.	Low
Product	Manifest	build-jdk-spec	11	Low
Product	jar	package name	sdk	Highest
Product	jar	package name	openid	Highest
Product	jar	package name	connect	Highest
Product	Manifest	build-date	${timestamp}	Low
Product	pom	url	https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions	Medium
Product	pom	groupid	nimbusds	Highest
Product	jar	package name	client	Highest
Version	Manifest	build-tag	9.9	Low
Version	pom	version	9.9	Highest
Version	Manifest	Implementation-Version	9.9	High
Version	Manifest	Bundle-Version	9.9	High
Version	file	version	9.9	High

Identifiers

pkg:maven/com.nimbusds/oauth2-oidc-sdk@9.9 (Confidence:High)

objenesis-3.2.jar

Description:

A library for instantiating Java objects

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/objenesis/objenesis/3.2/objenesis-3.2.jar
MD5: 5c1ee20481a06561af295034ea89c4b4
SHA1: 7fadf57620c8b8abdf7519533e5527367cb51f09
SHA256:03d960bd5aef03c653eb000413ada15eb77cdd2b8e4448886edf5692805e35f3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	objenesis	Low
Vendor	file	name	objenesis	High
Vendor	pom	name	Objenesis	High
Vendor	Manifest	Implementation-Vendor	Joe Walnes, Henri Tremblay, Leonardo Mesquita	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	parent-artifactid	objenesis-parent	Low
Vendor	jar	package name	objenesis	Highest
Vendor	Manifest	specification-vendor	Joe Walnes, Henri Tremblay, Leonardo Mesquita	Low
Vendor	Manifest	automatic-module-name	org.objenesis	Medium
Vendor	pom	groupid	org.objenesis	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	groupid	objenesis	Highest
Vendor	Manifest	bundle-symbolicname	org.objenesis	Medium
Vendor	pom	parent-groupid	org.objenesis	Medium
Product	Manifest	specification-title	Objenesis	Medium
Product	pom	artifactid	objenesis	Highest
Product	Manifest	Implementation-Title	Objenesis	High
Product	file	name	objenesis	High
Product	pom	name	Objenesis	High
Product	pom	parent-artifactid	objenesis-parent	Medium
Product	Manifest	Bundle-Name	Objenesis	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	objenesis	Highest
Product	Manifest	automatic-module-name	org.objenesis	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	groupid	objenesis	Highest
Product	Manifest	bundle-symbolicname	org.objenesis	Medium
Product	pom	parent-groupid	org.objenesis	Medium
Version	Manifest	Implementation-Version	3.2	High
Version	pom	version	3.2	Highest
Version	file	version	3.2	High

Identifiers

pkg:maven/org.objenesis/objenesis@3.2 (Confidence:High)

ojdbc8-19.3.0.0.jar

Description:

Oracle JDBC Driver compatible with JDK8, JDK9, and JDK11

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/ojdbc8/19.3.0.0/ojdbc8-19.3.0.0.jar
MD5: 0b2a8e010df63e6feb396287d2ea7dbd
SHA1: 967c0b1a2d5b1435324de34a9b8018d294f8f47b
SHA256:a66d27a14f3adee484427cc4de008af85a5c3e78e2e3285a4dba1277332978a5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	ojdbc8	High
Vendor	jar	package name	oracle	Highest
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	Manifest	repository-id	JAVAVM_19.0.0.0.0_LINUX.X64_190404	Low
Vendor	Manifest	specification-vendor	Sun Microsystems Inc.	Low
Vendor	jar	package name	driver	Highest
Vendor	jar (hint)	package name	sun	Highest
Vendor	file	name	ojdbc8	High
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	jar	package name	jdbc	Highest
Vendor	pom	artifactid	ojdbc8	Low
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Product	Manifest	repository-id	JAVAVM_19.0.0.0.0_LINUX.X64_190404	Low
Product	jar	package name	driver	Highest
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	file	name	ojdbc8	High
Product	Manifest	Implementation-Title	JDBC	High
Product	pom	name	ojdbc8	High
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	jdbc	Highest
Product	jar	package name	oracle	Highest
Product	pom	artifactid	ojdbc8	Highest
Product	Manifest	specification-title	JDBC	Medium
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/ojdbc8@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:jdbc:19.3.0.0:*:*:*:*:*:*:* (Confidence:Highest)

okhttp-3.14.9.jar

File Path: /home/jenkins/.mvnrepository/com/squareup/okhttp3/okhttp/3.14.9/okhttp-3.14.9.jar
MD5: 69e22f2ccb614cf1bcfcca5cf7711045
SHA1: 3e6d101343c7ea687cd593e4990f73b25c878383
SHA256:2570fab55515cbf881d7a4ceef49fc515490bc027057e666776a2832465aeca0
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	com.squareup.okhttp3	Medium
Vendor	pom	groupid	squareup.okhttp3	Highest
Vendor	jar	package name	okhttp3	Highest
Vendor	pom	name	OkHttp	High
Vendor	Manifest	automatic-module-name	okhttp3	Medium
Vendor	pom	artifactid	okhttp	Low
Vendor	file	name	okhttp	High
Vendor	pom	groupid	com.squareup.okhttp3	Highest
Vendor	pom	parent-artifactid	parent	Low
Product	pom	parent-groupid	com.squareup.okhttp3	Medium
Product	pom	groupid	squareup.okhttp3	Highest
Product	jar	package name	okhttp3	Highest
Product	pom	name	OkHttp	High
Product	Manifest	automatic-module-name	okhttp3	Medium
Product	pom	parent-artifactid	parent	Medium
Product	file	name	okhttp	High
Product	pom	artifactid	okhttp	Highest
Version	file	version	3.14.9	High
Version	pom	version	3.14.9	Highest

Identifiers

pkg:maven/com.squareup.okhttp3/okhttp@3.14.9 (Confidence:High)
cpe:2.3:a:squareup:okhttp:3.14.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:squareup:okhttp3:3.14.9:*:*:*:*:*:*:* (Confidence:Highest)

okio-1.17.2.jar

File Path: /home/jenkins/.mvnrepository/com/squareup/okio/okio/1.17.2/okio-1.17.2.jar
MD5: 54a6a8979bd8e64e1fbf21d511654737
SHA1: 78c7820b205002da4d2d137f6f312bd64b3d6049
SHA256:f80ce42d2ffac47ad4c47e1d6f980d604d247ceb1a886705cf4581ab0c9fe2b8
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	Okio	High
Vendor	Manifest	automatic-module-name	okio	Medium
Vendor	file	name	okio	High
Vendor	pom	groupid	com.squareup.okio	Highest
Vendor	pom	parent-groupid	com.squareup.okio	Medium
Vendor	pom	artifactid	okio	Low
Vendor	pom	groupid	squareup.okio	Highest
Vendor	jar	package name	okio	Highest
Vendor	pom	parent-artifactid	okio-parent	Low
Product	pom	parent-artifactid	okio-parent	Medium
Product	pom	name	Okio	High
Product	Manifest	automatic-module-name	okio	Medium
Product	file	name	okio	High
Product	pom	parent-groupid	com.squareup.okio	Medium
Product	pom	artifactid	okio	Highest
Product	pom	groupid	squareup.okio	Highest
Product	jar	package name	okio	Highest
Version	pom	version	1.17.2	Highest
Version	file	version	1.17.2	High

Identifiers

pkg:maven/com.squareup.okio/okio@1.17.2 (Confidence:High)

ons-19.3.0.0.jar

Description:

Java Client-Side Oracle Notification Services(ONS)

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/ons/19.3.0.0/ons-19.3.0.0.jar
MD5: ac4a31065dcbf2286a46cb68e9f4d1fd
SHA1: cf3f3ef525c61a27fe9952652a156ddd738b1cd5
SHA256:6e3f243700716c4fa2e9ddfaa08c9394ad6fda3a640d3bef03941f7b573df9d7
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	label	ONS_19.0.0.0.0_LINUX.X64_181205.1445	Low
Vendor	jar	package name	notification	Highest
Vendor	jar (hint)	package name	sun	Highest
Vendor	file	name	ons	High
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	jar	package name	oracle	Highest
Vendor	jar	package name	ons	Highest
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	pom	name	ons	High
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Vendor	pom	artifactid	ons	Low
Product	Manifest	label	ONS_19.0.0.0.0_LINUX.X64_181205.1445	Low
Product	jar	package name	notification	Highest
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	file	name	ons	High
Product	pom	artifactid	ons	Highest
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	ons	Highest
Product	jar	package name	oracle	Highest
Product	pom	name	ons	High
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/ons@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

oraclepki-19.3.0.0.jar

Description:

Oracle PKI to access Oracle Wallets from Java

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/oraclepki/19.3.0.0/oraclepki-19.3.0.0.jar
MD5: babe79be0b8106cd1090a7194994b300
SHA1: 0e52a34f271c6c62ee1a73b71cc19da5459b709f
SHA256:04bdcbaa8da2c5800403ad0f448bec2867c6e9a12665d3f2c2aba1539dec24dc
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	oraclepki	High
Vendor	jar (hint)	package name	sun	Highest
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	jar	package name	oraclepki	Highest
Vendor	jar	package name	pki	Highest
Vendor	jar	package name	oracle	Highest
Vendor	pom	artifactid	oraclepki	Low
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	file	name	oraclepki	High
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Product	pom	name	oraclepki	High
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	Manifest	specification-title	ENTSEC_DB19.3.0.0.0_GENERIC_190302.0616	Medium
Product	pom	artifactid	oraclepki	Highest
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	oraclepki	Highest
Product	jar	package name	pki	Highest
Product	jar	package name	oracle	Highest
Product	file	name	oraclepki	High
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/oraclepki@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

org.osgi.core-4.3.1.jar

Description:

    OSGi Service Platform Release 4 Version 4.3, Core Interfaces
     and Classes for use in compiling bundles.

License:

        Apache License, Version 2.0
      : 
        http://opensource.org/licenses/apache2.0.php

File Path: /home/jenkins/.mvnrepository/org/osgi/org.osgi.core/4.3.1/org.osgi.core-4.3.1.jar
MD5: 8053bbc1b55d51f5abae005625209d08
SHA1: 5458ffe2ba049e76c29f2df2dc3ffccddf8b839e
SHA256:10dad99322b2081015749e2d21538a4a9bc4cb3699d3b7b41ce452a544b09abe
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.osgi.core	High
Vendor	jar	package name	osgi	Highest
Vendor	pom	groupid	org.osgi	Highest
Vendor	pom	groupid	org.osgi	Highest
Vendor	Manifest	bundle-copyright	Copyright (c) OSGi Alliance (2000, 2012). All Rights Reserved.	Low
Vendor	pom	url	http://www.osgi.org	Highest
Vendor	pom	artifactid	org.osgi.core	Low
Vendor	jar	package name	service	Highest
Vendor	pom	name	osgi.core	High
Vendor	Manifest	bundle-symbolicname	osgi.core	Medium
Vendor	pom	organization name	OSGi Alliance	High
Vendor	pom	organization url	http://www.osgi.org	Medium
Vendor	jar	package name	version	Highest
Product	pom	organization url	http://www.osgi.org	Low
Product	file	name	org.osgi.core	High
Product	jar	package name	osgi	Highest
Product	pom	artifactid	org.osgi.core	Highest
Product	pom	groupid	org.osgi	Highest
Product	Manifest	bundle-copyright	Copyright (c) OSGi Alliance (2000, 2012). All Rights Reserved.	Low
Product	jar	package name	service	Highest
Product	pom	name	osgi.core	High
Product	Manifest	bundle-symbolicname	osgi.core	Medium
Product	pom	artifactid	org.osgi.core	Highest
Product	jar	package name	version	Highest
Product	pom	url	http://www.osgi.org	Medium
Product	Manifest	Bundle-Name	osgi.core	Medium
Product	pom	organization name	OSGi Alliance	Low
Version	pom	version	4.3.1	Highest

Identifiers

pkg:maven/org.osgi/org.osgi.core@4.3.1 (Confidence:Highest)

org.osgi.enterprise-4.2.0.jar

Description:

OSGi 4.2.0 Enterprise API

License:

http://opensource.org/licenses/apache2.0.php; link="http://www.apache.org/licenses/LICENSE-2.0"; description="Apache License, Version 2.0"

File Path: /home/jenkins/.mvnrepository/org/osgi/org.osgi.enterprise/4.2.0/org.osgi.enterprise-4.2.0.jar
MD5: c7e77f6056db8b4d6bd9ccf512b66f75
SHA1: 8634dcb0fc62196e820ed0f1062993c377f74972
SHA256:c05df7ec091e991712996e4ef9880b165bcde2c4127231607c58c3f558a65f2b
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	org.osgi.enterprise	High
Vendor	pom	groupid	osgi	Highest
Vendor	jar	package name	osgi	Highest
Vendor	pom	groupid	org.osgi	Highest
Vendor	Manifest	bundle-symbolicname	osgi.enterprise	Medium
Vendor	pom	artifactid	osgi.enterprise	Low
Vendor	Manifest	bundle-copyright	Copyright (c) OSGi Alliance (2000, 2010). All Rights Reserved.	Low
Product	Manifest	Bundle-Name	osgi.enterprise	Medium
Product	file	name	org.osgi.enterprise	High
Product	pom	groupid	osgi	Highest
Product	pom	artifactid	osgi.enterprise	Highest
Product	jar	package name	osgi	Highest
Product	Manifest	bundle-symbolicname	osgi.enterprise	Medium
Product	jar	package name	service	Highest
Product	pom	artifactid	org.osgi.enterprise	Highest
Product	Manifest	bundle-copyright	Copyright (c) OSGi Alliance (2000, 2010). All Rights Reserved.	Low
Version	pom	version	4.2.0	Highest
Version	file	version	4.2.0	High

Identifiers

pkg:maven/org.osgi/org.osgi.enterprise@4.2.0 (Confidence:High)

osdt_cert-19.3.0.0.jar

Description:

osdt_cert.jar to access Oracle Wallets from Java

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/osdt_cert/19.3.0.0/osdt_cert-19.3.0.0.jar
MD5: 8bde9e2dabea91083a737ab02aed4b73
SHA1: c134652fdcb17ff72963d386efd8ade902d2eaff
SHA256:faa0cca594d354d5bb1f5eac3dafa1568387a27576813a9bd723d6fd8744be8c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	osdt_cert	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	jar	package name	oracle	Highest
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	pom	name	osdt_cert	High
Vendor	jar (hint)	package name	sun	Highest
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	Manifest	repository-id	ENTSEC_DB19.3.0.0.0_GENERIC_190302.0616	Low
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	pom	artifactid	osdt_cert	Low
Vendor	jar	package name	cert	Highest
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Product	pom	name	osdt_cert	High
Product	file	name	osdt_cert	High
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	jar	package name	security	Highest
Product	Manifest	Implementation-Title	Oracle Security Developer Tools Security Engine	High
Product	Manifest	repository-id	ENTSEC_DB19.3.0.0.0_GENERIC_190302.0616	Low
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	cert	Highest
Product	Manifest	specification-title	Oracle Security Developer Tools Security Engine	Medium
Product	jar	package name	oracle	Highest
Product	pom	artifactid	osdt_cert	Highest
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/osdt_cert@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

osdt_core-19.3.0.0.jar

Description:

osdt_core.jar to access Oracle Wallets from Java

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/osdt_core/19.3.0.0/osdt_core-19.3.0.0.jar
MD5: 74366ecfe0555a7ee277d1ce11a4933e
SHA1: 2e01c262879c97de876c238966eb1da48542f2e8
SHA256:c7a90c07a12e73d03c1edd6a02e699001213e698fe0f5225a2771ccd46ab0b63
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	osdt_core	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	jar	package name	oracle	Highest
Vendor	pom	artifactid	osdt_core	Low
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	jar	package name	core	Highest
Vendor	jar (hint)	package name	sun	Highest
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	Manifest	repository-id	ENTSEC_DB19.3.0.0.0_GENERIC_190302.0616	Low
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Vendor	pom	name	osdt_core	High
Product	file	name	osdt_core	High
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	jar	package name	security	Highest
Product	jar	package name	oracle	Highest
Product	jar	package name	core	Highest
Product	Manifest	specification-title	Oracle Security Developer Tools Crypto	Medium
Product	Manifest	repository-id	ENTSEC_DB19.3.0.0.0_GENERIC_190302.0616	Low
Product	pom	artifactid	osdt_core	Highest
Product	jar	package name	crypto	Highest
Product	pom	groupid	oracle.ojdbc	Highest
Product	Manifest	Implementation-Title	Oracle Security Developer Tools Crypto	High
Product	pom	name	osdt_core	High
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/osdt_core@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

postgresql-42.2.13.jar

Description:

PostgreSQL JDBC Driver Postgresql

License:

BSD-2-Clause: https://jdbc.postgresql.org/about/license.html

File Path: /home/jenkins/.mvnrepository/org/postgresql/postgresql/42.2.13/postgresql-42.2.13.jar
MD5: 31d0fbb0ec31c681fcced463a4b1b8ce
SHA1: 750a4e6dbc753308f50e998920b760b2b5c048ad
SHA256:66de7790e75c173501f6591114defa297455214eceb462a50b255867c48a8b68
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	PostgreSQL Global Development Group	High
Vendor	Manifest	specification-vendor	Oracle Corporation	Low
Vendor	Manifest	Implementation-Vendor-Id	org.postgresql	Medium
Vendor	Manifest	automatic-module-name	org.postgresql.jdbc	Medium
Vendor	Manifest	bundle-docurl	https://jdbc.postgresql.org/	Low
Vendor	pom	groupid	postgresql	Highest
Vendor	file	name	postgresql	High
Vendor	Manifest	bundle-symbolicname	org.postgresql.jdbc	Medium
Vendor	pom	artifactid	postgresql	Low
Vendor	jar	package name	driver	Highest
Vendor	pom	url	https://jdbc.postgresql.org	Highest
Vendor	pom	groupid	org.postgresql	Highest
Vendor	jar	package name	postgresql	Highest
Vendor	Manifest	provide-capability	osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory"	Low
Vendor	pom	organization name	PostgreSQL Global Development Group	High
Vendor	pom	name	PostgreSQL JDBC Driver	High
Vendor	jar	package name	jdbc	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(\|(osgi.ee=J2SE)(osgi.ee=JavaSE))(version>=1.8))"	Low
Vendor	pom	organization url	https://jdbc.postgresql.org/	Medium
Vendor	Manifest	bundle-copyright	Copyright (c) 2003-2020, PostgreSQL Global Development Group	Low
Product	Manifest	Bundle-Name	PostgreSQL JDBC Driver	Medium
Product	jar	package name	osgi	Highest
Product	Manifest	automatic-module-name	org.postgresql.jdbc	Medium
Product	Manifest	bundle-docurl	https://jdbc.postgresql.org/	Low
Product	pom	groupid	postgresql	Highest
Product	pom	organization name	PostgreSQL Global Development Group	Low
Product	file	name	postgresql	High
Product	Manifest	specification-title	JDBC	Medium
Product	Manifest	bundle-symbolicname	org.postgresql.jdbc	Medium
Product	jar	package name	driver	Highest
Product	pom	artifactid	postgresql	Highest
Product	jar	package name	postgresql	Highest
Product	Manifest	provide-capability	osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory"	Low
Product	jar	package name	version	Highest
Product	pom	name	PostgreSQL JDBC Driver	High
Product	jar	package name	jdbc	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(\|(osgi.ee=J2SE)(osgi.ee=JavaSE))(version>=1.8))"	Low
Product	pom	url	https://jdbc.postgresql.org	Medium
Product	Manifest	bundle-copyright	Copyright (c) 2003-2020, PostgreSQL Global Development Group	Low
Product	Manifest	Implementation-Title	PostgreSQL JDBC Driver	High
Product	pom	organization url	https://jdbc.postgresql.org/	Low
Version	Manifest	Bundle-Version	42.2.13	High
Version	Manifest	Implementation-Version	42.2.13	High
Version	pom	version	42.2.13	Highest
Version	file	version	42.2.13	High

Identifiers

pkg:maven/org.postgresql/postgresql@42.2.13 (Confidence:High)
cpe:2.3:a:postgresql:postgresql:42.2.13:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:postgresql:postgresql_jdbc_driver:42.2.13:*:*:*:*:*:*:* (Confidence:Low)

problem-0.23.0.jar

Description:

An implementation of the application/problem+json draft.

File Path: /home/jenkins/.mvnrepository/org/zalando/problem/0.23.0/problem-0.23.0.jar
MD5: 1291e5bae7bfdf265ec3ba138e6d21cb
SHA1: 749bcf31b8223309a3a330352c20d8692239ac1a
SHA256:f3164255f334f9774a1b92c9f13aa8563f66424165df3592fa8c6005faf6a245
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.zalando	Medium
Vendor	pom	name	Problem	High
Vendor	file	name	problem	High
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	problem	Highest
Vendor	jar	package name	zalando	Low
Vendor	jar	package name	zalando	Highest
Vendor	pom	artifactid	problem	Low
Vendor	pom	groupid	org.zalando	Highest
Vendor	pom	parent-artifactid	problem-parent	Low
Vendor	jar	package name	problem	Low
Product	pom	parent-groupid	org.zalando	Medium
Product	pom	name	Problem	High
Product	file	name	problem	High
Product	pom	groupid	zalando	Highest
Product	jar	package name	problem	Highest
Product	jar	package name	zalando	Highest
Product	pom	parent-artifactid	problem-parent	Medium
Product	pom	artifactid	problem	Highest
Product	jar	package name	problem	Low
Version	pom	version	0.23.0	Highest
Version	file	version	0.23.0	High

Identifiers

pkg:maven/org.zalando/problem@0.23.0 (Confidence:High)

problem-spring-common-0.25.2.jar

Description:

Spring common Advices for Problems

File Path: /home/jenkins/.mvnrepository/org/zalando/problem-spring-common/0.25.2/problem-spring-common-0.25.2.jar
MD5: 8b0340476b4b911d83b7e6de2110a86f
SHA1: 64efe64b632c0d18a5fc7df733969252796d293a
SHA256:8eaac0fdad326dc7d732ed563d3aedda8356f3c6a38c67766160f3d22eb43eac
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.zalando	Medium
Vendor	jar	package name	spring	Low
Vendor	jar	package name	spring	Highest
Vendor	pom	name	Problem: Spring Common	High
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	problem	Highest
Vendor	jar	package name	zalando	Low
Vendor	pom	groupid	org.zalando	Highest
Vendor	jar	package name	zalando	Highest
Vendor	file	name	problem-spring-common	High
Vendor	pom	parent-artifactid	problem-spring-parent	Low
Vendor	jar	package name	common	Highest
Vendor	pom	artifactid	problem-spring-common	Low
Vendor	jar	package name	problem	Low
Product	pom	parent-groupid	org.zalando	Medium
Product	jar	package name	spring	Low
Product	jar	package name	spring	Highest
Product	pom	name	Problem: Spring Common	High
Product	pom	groupid	zalando	Highest
Product	jar	package name	problem	Highest
Product	pom	parent-artifactid	problem-spring-parent	Medium
Product	pom	artifactid	problem-spring-common	Highest
Product	jar	package name	common	Low
Product	jar	package name	zalando	Highest
Product	file	name	problem-spring-common	High
Product	jar	package name	common	Highest
Product	jar	package name	problem	Low
Version	pom	version	0.25.2	Highest
Version	file	version	0.25.2	High

Identifiers

pkg:maven/org.zalando/problem-spring-common@0.25.2 (Confidence:High)

problem-spring-web-0.25.2.jar

Description:

Spring Controller Advices for Problems

File Path: /home/jenkins/.mvnrepository/org/zalando/problem-spring-web/0.25.2/problem-spring-web-0.25.2.jar
MD5: ade6cf924066bb05d680025078bdf68d
SHA1: da209cac0bece7e6050e59ba7c3e57183db9c3c6
SHA256:be40e998e2edcb239df4f19dedbd921c91873d203f3b53559486a791e946c58e
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.zalando	Medium
Vendor	jar	package name	spring	Low
Vendor	jar	package name	spring	Highest
Vendor	pom	name	Problem: Spring Web	High
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	problem	Highest
Vendor	jar	package name	zalando	Low
Vendor	pom	groupid	org.zalando	Highest
Vendor	jar	package name	web	Highest
Vendor	jar	package name	zalando	Highest
Vendor	pom	artifactid	problem-spring-web	Low
Vendor	pom	parent-artifactid	problem-spring-parent	Low
Vendor	file	name	problem-spring-web	High
Vendor	jar	package name	problem	Low
Product	pom	parent-groupid	org.zalando	Medium
Product	jar	package name	spring	Low
Product	jar	package name	spring	Highest
Product	pom	name	Problem: Spring Web	High
Product	pom	groupid	zalando	Highest
Product	jar	package name	problem	Highest
Product	pom	artifactid	problem-spring-web	Highest
Product	pom	parent-artifactid	problem-spring-parent	Medium
Product	jar	package name	web	Highest
Product	jar	package name	zalando	Highest
Product	file	name	problem-spring-web	High
Product	jar	package name	web	Low
Product	jar	package name	problem	Low
Version	pom	version	0.25.2	Highest
Version	file	version	0.25.2	High

Identifiers

pkg:maven/org.zalando/problem-spring-web@0.25.2 (Confidence:High)

problem-violations-0.25.2.jar

Description:

Constraint violations Problems

File Path: /home/jenkins/.mvnrepository/org/zalando/problem-violations/0.25.2/problem-violations-0.25.2.jar
MD5: 70dddd39785af5f243f74ba3cf626ae2
SHA1: 2bd65b384ebfe5611c545b3ba867b74ec8f1e643
SHA256:0991531d14040fa0ee7968b18f29ead3e0699400b2724a72f8b13176d5ede7e8
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.zalando	Medium
Vendor	pom	name	Problem: Violations	High
Vendor	pom	artifactid	problem-violations	Low
Vendor	pom	groupid	zalando	Highest
Vendor	jar	package name	problem	Highest
Vendor	jar	package name	violations	Highest
Vendor	jar	package name	zalando	Low
Vendor	pom	groupid	org.zalando	Highest
Vendor	file	name	problem-violations	High
Vendor	jar	package name	zalando	Highest
Vendor	pom	parent-artifactid	problem-spring-parent	Low
Vendor	jar	package name	violations	Low
Vendor	jar	package name	problem	Low
Product	pom	artifactid	problem-violations	Highest
Product	pom	parent-groupid	org.zalando	Medium
Product	pom	parent-artifactid	problem-spring-parent	Medium
Product	pom	name	Problem: Violations	High
Product	pom	groupid	zalando	Highest
Product	jar	package name	problem	Highest
Product	jar	package name	violations	Highest
Product	jar	package name	zalando	Highest
Product	jar	package name	violations	Low
Product	file	name	problem-violations	High
Product	jar	package name	problem	Low
Version	pom	version	0.25.2	Highest
Version	file	version	0.25.2	High

Identifiers

pkg:maven/org.zalando/problem-violations@0.25.2 (Confidence:High)

simplefan-19.3.0.0.jar

Description:

Oracle Simple FAN

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/simplefan/19.3.0.0/simplefan-19.3.0.0.jar
MD5: 9a1f7448f4c1fb779b1d8816e51a2c2f
SHA1: bcbfbb3cc529995f33c8694eb7cbc605c129e4e6
SHA256:5138d658edff0e0106f0559f68c72fb90f1cd34381492995b75d0012ea9e12f2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	simplefan	High
Vendor	jar (hint)	package name	sun	Highest
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	jar	package name	simplefan	Highest
Vendor	jar	package name	oracle	Highest
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	pom	artifactid	simplefan	Low
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Vendor	file	name	simplefan	High
Product	Manifest	Implementation-Title	Oracle Simple FAN	High
Product	pom	name	simplefan	High
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	simplefan	Highest
Product	pom	artifactid	simplefan	Highest
Product	jar	package name	oracle	Highest
Product	file	name	simplefan	High
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/simplefan@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

slf4j-api-1.7.32.jar

Description:

The slf4j API

File Path: /home/jenkins/.mvnrepository/org/slf4j/slf4j-api/1.7.32/slf4j-api-1.7.32.jar
MD5: fbcf58513bc25b80f075d812aad3e3cf
SHA1: cdcff33940d9f2de763bc41ea05a0be5941176c3
SHA256:3624f8474c1af46d75f98bc097d7864a323c81b3808aa43689a6e1c601c027be
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-groupid	org.slf4j	Medium
Vendor	Manifest	bundle-symbolicname	slf4j.api	Medium
Vendor	pom	groupid	org.slf4j	Highest
Vendor	pom	groupid	slf4j	Highest
Vendor	pom	url	http://www.slf4j.org	Highest
Vendor	pom	name	SLF4J API Module	High
Vendor	jar	package name	slf4j	Highest
Vendor	Manifest	automatic-module-name	org.slf4j	Medium
Vendor	pom	artifactid	slf4j-api	Low
Vendor	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Vendor	pom	parent-artifactid	slf4j-parent	Low
Vendor	file	name	slf4j-api	High
Product	pom	parent-groupid	org.slf4j	Medium
Product	Manifest	bundle-symbolicname	slf4j.api	Medium
Product	pom	artifactid	slf4j-api	Highest
Product	pom	groupid	slf4j	Highest
Product	Manifest	Bundle-Name	slf4j-api	Medium
Product	pom	name	SLF4J API Module	High
Product	jar	package name	slf4j	Highest
Product	Manifest	automatic-module-name	org.slf4j	Medium
Product	pom	url	http://www.slf4j.org	Medium
Product	Manifest	bundle-requiredexecutionenvironment	J2SE-1.5	Low
Product	Manifest	Implementation-Title	slf4j-api	High
Product	pom	parent-artifactid	slf4j-parent	Medium
Product	file	name	slf4j-api	High
Version	Manifest	Implementation-Version	1.7.32	High
Version	Manifest	Bundle-Version	1.7.32	High
Version	file	version	1.7.32	High
Version	pom	version	1.7.32	Highest

Identifiers

pkg:maven/org.slf4j/slf4j-api@1.7.32 (Confidence:High)

snakeyaml-1.27.jar

Description:

YAML 1.1 parser and emitter for Java

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/yaml/snakeyaml/1.27/snakeyaml-1.27.jar
MD5: 466ff09da784f9f21b2e6bf3b486a8cd
SHA1: 359d62567480b07a679dc643f82fc926b100eed5
SHA256:7e7cce6740ed705bfdfaac7b442c1375d2986d2f2935936a5bd40c14e18fd736
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	snakeyaml	Highest
Vendor	jar	package name	emitter	Highest
Vendor	pom	groupid	yaml	Highest
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	yaml	Highest
Vendor	pom	name	SnakeYAML	High
Vendor	pom	groupid	org.yaml	Highest
Vendor	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Vendor	jar	package name	parser	Highest
Vendor	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Vendor	file	name	snakeyaml	High
Vendor	pom	url	http://www.snakeyaml.org	Highest
Vendor	pom	artifactid	snakeyaml	Low
Product	pom	artifactid	snakeyaml	Highest
Product	jar	package name	snakeyaml	Highest
Product	jar	package name	emitter	Highest
Product	pom	groupid	yaml	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	yaml	Highest
Product	Manifest	Bundle-Name	SnakeYAML	Medium
Product	pom	name	SnakeYAML	High
Product	pom	url	http://www.snakeyaml.org	Medium
Product	Manifest	automatic-module-name	org.yaml.snakeyaml	Medium
Product	jar	package name	parser	Highest
Product	Manifest	bundle-symbolicname	org.yaml.snakeyaml	Medium
Product	file	name	snakeyaml	High
Version	file	version	1.27	High
Version	pom	version	1.27	Highest

Identifiers

pkg:maven/org.yaml/snakeyaml@1.27 (Confidence:High)
cpe:2.3:a:snakeyaml_project:snakeyaml:1.27:*:*:*:*:*:*:* (Confidence:Highest)

spring-aop-5.3.9.jar

Description:

Spring AOP

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-aop/5.3.9/spring-aop-5.3.9.jar
MD5: 3e9d65390d805d73546194f9576861c7
SHA1: 9bcad31a74e60d205500dd67d2220bd0195c63f8
SHA256:a8997f8dcb2cd16d3bce26c669ea128688e18311eb93778830729b484850e5ee
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	file	name	spring-aop	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	automatic-module-name	spring.aop	Medium
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	jar	package name	aop	Highest
Vendor	pom	name	Spring AOP	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	artifactid	spring-aop	Low
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Product	file	name	spring-aop	High
Product	Manifest	Implementation-Title	spring-aop	High
Product	pom	artifactid	spring-aop	Highest
Product	Manifest	automatic-module-name	spring.aop	Medium
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	jar	package name	aop	Highest
Product	pom	name	Spring AOP	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-aop@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-aspects-5.3.9.jar

Description:

Spring Aspects

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-aspects/5.3.9/spring-aspects-5.3.9.jar
MD5: e98b24117f34829c5ff8468ae093bce0
SHA1: ee2c3f8f99e1f115f502a7e47e632b1ed229e766
SHA256:387c2a62885b0b379b2e9c51dbf5c33acd21bb3e6fdf4ceae030228fbce624d3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	name	Spring Aspects	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	Manifest	automatic-module-name	spring.aspects	Medium
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	file	name	spring-aspects	High
Vendor	pom	artifactid	spring-aspects	Low
Product	Manifest	Implementation-Title	spring-aspects	High
Product	Manifest	automatic-module-name	spring.aspects	Medium
Product	pom	artifactid	spring-aspects	Highest
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	pom	name	Spring Aspects	High
Product	file	name	spring-aspects	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-aspects@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-beans-5.3.9.jar

Description:

Spring Beans

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-beans/5.3.9/spring-beans-5.3.9.jar
MD5: f55a5aed9d0db591b8128dd8da12e22d
SHA1: 48600db2cb1abc0f7ef2b073f0c1abd78a83bcfc
SHA256:58db038ca3a63cad7e265164e5ea94682ce09af303554e275265c341f238e9a6
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.beans	Medium
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	artifactid	spring-beans	Low
Vendor	jar	package name	beans	Highest
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	file	name	spring-beans	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	Spring Beans	High
Product	Manifest	automatic-module-name	spring.beans	Medium
Product	pom	artifactid	spring-beans	Highest
Product	jar	package name	beans	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	file	name	spring-beans	High
Product	Manifest	Implementation-Title	spring-beans	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	pom	name	Spring Beans	High
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-beans@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-boot-2.5.3.jar

Description:

Spring Boot

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot/2.5.3/spring-boot-2.5.3.jar
MD5: 5f665208487ba5c579904323202a73fc
SHA1: e25d2de9e166a8bbbfae633fc03220ab36ac19a9
SHA256:2997104f486f2e3b18aa09f4de2c732ae659a6ce81179fde3e09345f79835e5b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-boot	Low
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	pom	name	spring-boot	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	automatic-module-name	spring.boot	Medium
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	file	name	spring-boot	High
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	boot	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-boot	Highest
Product	pom	name	spring-boot	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	groupid	springframework.boot	Highest
Product	Manifest	automatic-module-name	spring.boot	Medium
Product	file	name	spring-boot	High
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	springframework	Highest
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	Implementation-Title	Spring Boot	High
Product	jar	package name	boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-actuator-2.5.3.jar

Description:

Spring Boot Actuator

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-actuator/2.5.3/spring-boot-actuator-2.5.3.jar
MD5: edfaa424b74ab3108628eb07d46acaa3
SHA1: 6d3bbb59680fbf71b9aca6a7aa08082c8a09b79b
SHA256:352c782f3dfa2aa4dc5bcd40cb2aae4d30c9713459775bd5c0535fd08a11bb75
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	name	spring-boot-actuator	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	Manifest	automatic-module-name	spring.boot.actuator	Medium
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-actuator	High
Vendor	jar	package name	springframework	Highest
Vendor	pom	artifactid	spring-boot-actuator	Low
Vendor	jar	package name	boot	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-boot-actuator	Highest
Product	Manifest	Implementation-Title	Spring Boot Actuator	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	groupid	springframework.boot	Highest
Product	pom	name	spring-boot-actuator	High
Product	Manifest	automatic-module-name	spring.boot.actuator	Medium
Product	pom	organization url	https://spring.io	Low
Product	file	name	spring-boot-actuator	High
Product	jar	package name	springframework	Highest
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	jar	package name	boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-actuator@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-actuator-autoconfigure-2.5.3.jar

Description:

Spring Boot Actuator AutoConfigure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-actuator-autoconfigure/2.5.3/spring-boot-actuator-autoconfigure-2.5.3.jar
MD5: 8c0b944aceab09d445bc4a6555b7543b
SHA1: 367ff5c92893fbc2f6903a564f88ec5f2e49efdd
SHA256:0f0e0b8a593e047d6073fa9a9bb7c30ec3f8de4f1d418ef3c98bbcbd4e70320d
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	jar	package name	autoconfigure	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	spring-boot-actuator-autoconfigure	High
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	artifactid	spring-boot-actuator-autoconfigure	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	file	name	spring-boot-actuator-autoconfigure	High
Vendor	Manifest	automatic-module-name	spring.boot.actuator.autoconfigure	Medium
Vendor	jar	package name	boot	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	autoconfigure	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	spring-boot-actuator-autoconfigure	High
Product	pom	groupid	springframework.boot	Highest
Product	pom	artifactid	spring-boot-actuator-autoconfigure	Highest
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	springframework	Highest
Product	Manifest	Implementation-Title	Spring Boot Actuator AutoConfigure	High
Product	file	name	spring-boot-actuator-autoconfigure	High
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	jar	package name	boot	Highest
Product	Manifest	automatic-module-name	spring.boot.actuator.autoconfigure	Medium
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-actuator-autoconfigure@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-autoconfigure-2.5.3.jar

Description:

Spring Boot AutoConfigure

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-autoconfigure/2.5.3/spring-boot-autoconfigure-2.5.3.jar
MD5: 21c5655596daa4513801770e1b836c75
SHA1: f03d7e9102d93ab25110da850be9facf11818a0b
SHA256:29418f5a8ec21a19026be408ba394b985f51036b957c8f115eb37b79e17caece
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-boot-autoconfigure	High
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	jar	package name	autoconfigure	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	Manifest	automatic-module-name	spring.boot.autoconfigure	Medium
Vendor	pom	artifactid	spring-boot-autoconfigure	Low
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	pom	name	spring-boot-autoconfigure	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	boot	Highest
Product	file	name	spring-boot-autoconfigure	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	autoconfigure	Highest
Product	pom	artifactid	spring-boot-autoconfigure	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	groupid	springframework.boot	Highest
Product	Manifest	automatic-module-name	spring.boot.autoconfigure	Medium
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-boot-autoconfigure	High
Product	jar	package name	springframework	Highest
Product	Manifest	Implementation-Title	Spring Boot AutoConfigure	High
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	jar	package name	boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-2.5.3.jar

Description:

Core starter, including auto-configuration support, logging and YAML

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter/2.5.3/spring-boot-starter-2.5.3.jar
MD5: 3c725ea79b9c4c6073be57e1003916a2
SHA1: 2e16fb3d63961548468a2cd70015d4b1be968fd4
SHA256:5aa43beed25ed8a1c0072de6a405156832fae95522e66231bab8e9f04e25dedb
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	file	name	spring-boot-starter	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	automatic-module-name	spring.boot.starter	Medium
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	artifactid	spring-boot-starter	Low
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	pom	name	spring-boot-starter	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-boot-starter	Highest
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	file	name	spring-boot-starter	High
Product	Manifest	Implementation-Title	Core starter, including auto-configuration support, logging and YAML	High
Product	pom	name	spring-boot-starter	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	automatic-module-name	spring.boot.starter	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-actuator-2.5.3.jar

Description:

Starter for using Spring Boot's Actuator which provides production ready features to help you monitor and manage your application

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-actuator/2.5.3/spring-boot-starter-actuator-2.5.3.jar
MD5: ede75e7db976f41313ad14eeed17abc2
SHA1: 2e2b57f69e4e9bcc6955673d18471093a723b193
SHA256:06b32e56ce6a6246f9b4da63cb0bd432ce19e2ffaa498dc7d7431ab4aaa1e2e1
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-boot-starter-actuator	High
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	name	spring-boot-starter-actuator	High
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	Manifest	automatic-module-name	spring.boot.starter.actuator	Medium
Vendor	pom	artifactid	spring-boot-starter-actuator	Low
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	name	spring-boot-starter-actuator	High
Product	Manifest	Implementation-Title	Starter for using Spring Boot's Actuator which provides production ready features to help you monitor and manage your application	High
Product	file	name	spring-boot-starter-actuator	High
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	artifactid	spring-boot-starter-actuator	Highest
Product	pom	organization url	https://spring.io	Low
Product	Manifest	automatic-module-name	spring.boot.starter.actuator	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-actuator@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-aop-2.5.3.jar

Description:

Starter for aspect-oriented programming with Spring AOP and AspectJ

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-aop/2.5.3/spring-boot-starter-aop-2.5.3.jar
MD5: 2b92a304e881ff5342bf7fa4d59de660
SHA1: 45a790c9abe248865e0ad2d1f8622d55877eb4f7
SHA256:173197a7aa4a007842909fd863f9c8d9e3a4e7703587a0d5dd9edcb8b3aecfa6
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	name	spring-boot-starter-aop	High
Vendor	file	name	spring-boot-starter-aop	High
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	pom	artifactid	spring-boot-starter-aop	Low
Vendor	Manifest	automatic-module-name	spring.boot.starter.aop	Medium
Product	file	name	spring-boot-starter-aop	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	Manifest	Implementation-Title	Starter for aspect-oriented programming with Spring AOP and AspectJ	High
Product	pom	artifactid	spring-boot-starter-aop	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	automatic-module-name	spring.boot.starter.aop	Medium
Product	pom	groupid	springframework.boot	Highest
Product	pom	name	spring-boot-starter-aop	High
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-aop@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-data-jpa-2.5.3.jar

Description:

Starter for using Spring Data JPA with Hibernate

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-data-jpa/2.5.3/spring-boot-starter-data-jpa-2.5.3.jar
MD5: f9fd2cec73dff47fc8efb5fc09674240
SHA1: 6e57512b8907710566daf2b246c724de3e38ad14
SHA256:9e0cc3def2f66b937dae118076f8175f44c705ca78b79a302eeab560567a42d0
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	file	name	spring-boot-starter-data-jpa	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	spring-boot-starter-data-jpa	High
Vendor	Manifest	automatic-module-name	spring.boot.starter.data.jpa	Medium
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	pom	artifactid	spring-boot-starter-data-jpa	Low
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	file	name	spring-boot-starter-data-jpa	High
Product	pom	organization url	https://spring.io	Low
Product	pom	artifactid	spring-boot-starter-data-jpa	Highest
Product	Manifest	Implementation-Title	Starter for using Spring Data JPA with Hibernate	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	spring-boot-starter-data-jpa	High
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	automatic-module-name	spring.boot.starter.data.jpa	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-data-jpa@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-hateoas-2.5.3.jar

Description:

Starter for building hypermedia-based RESTful web application with Spring MVC and Spring HATEOAS

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-hateoas/2.5.3/spring-boot-starter-hateoas-2.5.3.jar
MD5: f7e6bb246616184b4db191db2f80bf80
SHA1: f3edde47ccda37aaed33bbe072571c55d68af4c9
SHA256:6e8f31107bc4ae7d5239af30aac42c26a9fab3897d6bc18ffb3902e3408019fa
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	Manifest	automatic-module-name	spring.boot.starter.hateoas	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	name	spring-boot-starter-hateoas	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	artifactid	spring-boot-starter-hateoas	Low
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-starter-hateoas	High
Product	pom	artifactid	spring-boot-starter-hateoas	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	Manifest	automatic-module-name	spring.boot.starter.hateoas	Medium
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-boot-starter-hateoas	High
Product	file	name	spring-boot-starter-hateoas	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	Manifest	Implementation-Title	Starter for building hypermedia-based RESTful web application with Spring MVC and Spring HATEOAS	High
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-hateoas@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-jdbc-2.5.3.jar

Description:

Starter for using JDBC with the HikariCP connection pool

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-jdbc/2.5.3/spring-boot-starter-jdbc-2.5.3.jar
MD5: 587e08fe905f0bfd90010ee3995b1d5b
SHA1: ffc2a4b05d901775e5a96cc73450a1d072baecfa
SHA256:7c020b7eeda81fe162c1aecef3463eeada714e063f6c8e265dcf2035b0f41d8f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	spring-boot-starter-jdbc	High
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	artifactid	spring-boot-starter-jdbc	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	file	name	spring-boot-starter-jdbc	High
Vendor	Manifest	automatic-module-name	spring.boot.starter.jdbc	Medium
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Product	file	name	spring-boot-starter-jdbc	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	name	spring-boot-starter-jdbc	High
Product	Manifest	automatic-module-name	spring.boot.starter.jdbc	Medium
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	Manifest	Implementation-Title	Starter for using JDBC with the HikariCP connection pool	High
Product	pom	artifactid	spring-boot-starter-jdbc	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-jdbc@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-json-2.5.3.jar

Description:

Starter for reading and writing json

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-json/2.5.3/spring-boot-starter-json-2.5.3.jar
MD5: 3f0a03f8d6e700d08e451cf290d8f88a
SHA1: 10336b02e83756f916c0d9510555046cacfc2005
SHA256:416ad9d2378b73795bc913faa84a207cb6bc6947f3896db87c5a2dbe3a578441
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-boot-starter-json	High
Vendor	Manifest	automatic-module-name	spring.boot.starter.json	Medium
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	name	spring-boot-starter-json	High
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	pom	artifactid	spring-boot-starter-json	Low
Product	file	name	spring-boot-starter-json	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	automatic-module-name	spring.boot.starter.json	Medium
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	pom	artifactid	spring-boot-starter-json	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	Implementation-Title	Starter for reading and writing json	High
Product	pom	groupid	springframework.boot	Highest
Product	pom	name	spring-boot-starter-json	High
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-json@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-logging-2.5.3.jar

Description:

Starter for logging using Logback. Default logging starter

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-logging/2.5.3/spring-boot-starter-logging-2.5.3.jar
MD5: 4bae42017344b02a86fac4d7bfe4aedc
SHA1: a3a2057be09b4105ecf2e7e3097e0e3fe2eb2684
SHA256:91dbfd72d24eded04c34277e48aaad7ba327e151078c9afc482179cad2a45860
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	spring-boot-starter-logging	High
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	pom	artifactid	spring-boot-starter-logging	Low
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	file	name	spring-boot-starter-logging	High
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	Manifest	automatic-module-name	spring.boot.starter.logging	Medium
Product	file	name	spring-boot-starter-logging	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	name	spring-boot-starter-logging	High
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	automatic-module-name	spring.boot.starter.logging	Medium
Product	pom	artifactid	spring-boot-starter-logging	Highest
Product	Manifest	Implementation-Title	Starter for logging using Logback. Default logging starter	High
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-oauth2-client-2.5.3.jar

Description:

Starter for using Spring Security's OAuth2/OpenID Connect client features

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-oauth2-client/2.5.3/spring-boot-starter-oauth2-client-2.5.3.jar
MD5: 39a905fe6a5d5b71a8bda463d68b1fbd
SHA1: 8c58f7ad8eb911eba922ab6911743ad27eaa5142
SHA256:e7fecaf8ed61b3e0b8a2367add5ea6c6f431d676b2791d1b5bb0c64047345834
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	file	name	spring-boot-starter-oauth2-client	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	pom	artifactid	spring-boot-starter-oauth2-client	Low
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	Manifest	automatic-module-name	spring.boot.starter.oauth2.client	Medium
Vendor	pom	name	spring-boot-starter-oauth2-client	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-boot-starter-oauth2-client	Highest
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	file	name	spring-boot-starter-oauth2-client	High
Product	Manifest	automatic-module-name	spring.boot.starter.oauth2.client	Medium
Product	pom	name	spring-boot-starter-oauth2-client	High
Product	Manifest	Implementation-Title	Starter for using Spring Security's OAuth2/OpenID Connect client features	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-client@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-oauth2-resource-server-2.5.3.jar

Description:

Starter for using Spring Security's OAuth2 resource server features

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-oauth2-resource-server/2.5.3/spring-boot-starter-oauth2-resource-server-2.5.3.jar
MD5: a30acf3c00ac12425593a6d99e83d5a2
SHA1: 7d35b1c05b41caa485a467f5833d1c06a9c9540f
SHA256:935e0573f3f6a69f190d65cc6fe8d6a11ea65db98e2523b4de22bcf03f412d32
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	pom	name	spring-boot-starter-oauth2-resource-server	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	automatic-module-name	spring.boot.starter.oauth2.resource.server	Medium
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	artifactid	spring-boot-starter-oauth2-resource-server	Low
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-starter-oauth2-resource-server	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-boot-starter-oauth2-resource-server	High
Product	Manifest	Implementation-Title	Starter for using Spring Security's OAuth2 resource server features	High
Product	file	name	spring-boot-starter-oauth2-resource-server	High
Product	Manifest	automatic-module-name	spring.boot.starter.oauth2.resource.server	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	artifactid	spring-boot-starter-oauth2-resource-server	Highest
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-oauth2-resource-server@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:server:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-security-2.5.3.jar

Description:

Starter for using Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-security/2.5.3/spring-boot-starter-security-2.5.3.jar
MD5: 4e5a8f62a09f2da3844f7ae45a3fe67e
SHA1: f0b59a90ac52008f7cab9c30ca56cba5624f1f4a
SHA256:974ac24e2318f5361aeff781aab2791062d0871af1e170afa7695d8385776a4f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.boot.starter.security	Medium
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	pom	name	spring-boot-starter-security	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	pom	artifactid	spring-boot-starter-security	Low
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-starter-security	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-boot-starter-security	Highest
Product	Manifest	automatic-module-name	spring.boot.starter.security	Medium
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-boot-starter-security	High
Product	file	name	spring-boot-starter-security	High
Product	Manifest	Implementation-Title	Starter for using Spring Security	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-security@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-tomcat-2.5.3.jar

Description:

Starter for using Tomcat as the embedded servlet container. Default servlet container starter used by spring-boot-starter-web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-tomcat/2.5.3/spring-boot-starter-tomcat-2.5.3.jar
MD5: d649a32a411eae9b0cf5b2d4335e41b1
SHA1: 0bedcf69b9e83a0744d93e5672320039b55deffd
SHA256:9697ba30036163042006018982befb9e3f5f4c5c764828c7e26f40157ca60721
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	file	name	spring-boot-starter-tomcat	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	artifactid	spring-boot-starter-tomcat	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	Manifest	automatic-module-name	spring.boot.starter.tomcat	Medium
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	pom	name	spring-boot-starter-tomcat	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Product	Manifest	Implementation-Title	Starter for using Tomcat as the embedded servlet container. Default servlet container starter used by spring-boot-starter-web	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	name	spring-boot-starter-tomcat	High
Product	file	name	spring-boot-starter-tomcat	High
Product	pom	artifactid	spring-boot-starter-tomcat	Highest
Product	pom	organization url	https://spring.io	Low
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	Manifest	automatic-module-name	spring.boot.starter.tomcat	Medium
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-boot-starter-web-2.5.3.jar

Description:

Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/boot/spring-boot-starter-web/2.5.3/spring-boot-starter-web-2.5.3.jar
MD5: da4ba4ea7439cce3bcf3db21ff903379
SHA1: 02cb23f2928177eeb9be81036623f4350a86a433
SHA256:1e10753f40c1fdf3a4aa515bec59df5dfbfefad73f6b1c586502bda6bb8a82c9
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.boot.starter.web	Medium
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	pom	url	https://spring.io/projects/spring-boot	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	name	spring-boot-starter-web	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	groupid	springframework.boot	Highest
Vendor	Manifest	spring-boot-jar-type	dependencies-starter	Low
Vendor	pom	artifactid	spring-boot-starter-web	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	org.springframework.boot	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-boot-starter-web	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	Implementation-Title	Starter for building web, including RESTful, applications using Spring MVC. Uses Tomcat as the default embedded container	High
Product	Manifest	automatic-module-name	spring.boot.starter.web	Medium
Product	Manifest	spring-boot-jar-type	dependencies-starter	Low
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-boot-starter-web	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	spring-boot-starter-web	Highest
Product	pom	url	https://spring.io/projects/spring-boot	Medium
Product	file	name	spring-boot-starter-web	High
Product	pom	groupid	springframework.boot	Highest
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.boot/spring-boot-starter-web@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_boot:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-context-5.3.9.jar

Description:

Spring Context

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-context/5.3.9/spring-context-5.3.9.jar
MD5: 466b8be4a70e6e664f8b47f30cfa8149
SHA1: 887f4579ade4f47cf0102856f4f4c88eda8ec9d7
SHA256:aa6c959cf5081bead41f609c5de47b475ae93dcb0067ffd89d139d46cc100008
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	artifactid	spring-context	Low
Vendor	file	name	spring-context	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	jar	package name	context	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	name	Spring Context	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.context	Medium
Product	pom	artifactid	spring-context	Highest
Product	Manifest	Implementation-Title	spring-context	High
Product	file	name	spring-context	High
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	jar	package name	context	Highest
Product	pom	name	Spring Context	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	Manifest	automatic-module-name	spring.context	Medium
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-context@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-core-5.3.9.jar

Description:

Spring Core

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-core/5.3.9/spring-core-5.3.9.jar
MD5: ed404d466e109555f27e83a938ff7f26
SHA1: cfef19d1dfa41d56f8de66238dc015334997d573
SHA256:99fe2063bbde34050838eec09fb201a017982a7dfb39874d2aa5384ca5b7b9ac
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	jar	package name	io	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	artifactid	spring-core	Low
Vendor	jar	package name	core	Highest
Vendor	Manifest	automatic-module-name	spring.core	Medium
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	file	name	spring-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	Spring Core	High
Product	jar	package name	io	Highest
Product	jar	package name	core	Highest
Product	Manifest	Implementation-Title	spring-core	High
Product	Manifest	automatic-module-name	spring.core	Medium
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	file	name	spring-core	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	pom	artifactid	spring-core	Highest
Product	pom	name	Spring Core	High
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-core@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-data-commons-2.5.3.jar

File Path: /home/jenkins/.mvnrepository/org/springframework/data/spring-data-commons/2.5.3/spring-data-commons-2.5.3.jar
MD5: 721b9a764ce55eb5619bedd1d6547577
SHA1: 26d822ee2bff03fb82e68c8a61be92f4994c9b56
SHA256:50bd73d295d9e25769b5b35f89bd8111ae058c4e0a29fe5fe49e9cd96754a576
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	data	Highest
Vendor	pom	name	Spring Data Core	High
Vendor	file	name	spring-data-commons	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	core	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	springframework.data	Highest
Vendor	Manifest	automatic-module-name	spring.data.commons	Medium
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	pom	artifactid	spring-data-commons	Low
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Product	jar	package name	data	Highest
Product	pom	name	Spring Data Core	High
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	file	name	spring-data-commons	High
Product	pom	artifactid	spring-data-commons	Highest
Product	jar	package name	core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	groupid	springframework.data	Highest
Product	Manifest	automatic-module-name	spring.data.commons	Medium
Product	Manifest	Implementation-Title	Spring Data Core	High
Product	jar	package name	springframework	Highest
Product	pom	parent-groupid	org.springframework.data.build	Medium
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.data/spring-data-commons@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_data_commons:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-data-jpa-2.5.3.jar

Description:

Spring Data module for JPA repositories.

File Path: /home/jenkins/.mvnrepository/org/springframework/data/spring-data-jpa/2.5.3/spring-data-jpa-2.5.3.jar
MD5: 4706f9b0bcf8230b2eb832c537d52c6f
SHA1: 41db71033651f476fbc62a485387a4e891ec9940
SHA256:505ad8dd5c5801d1de1e0fb5f99d89fc69e1edf8699c86011911d22933156949
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	data	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	parent-artifactid	spring-data-parent	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	jpa	Highest
Vendor	pom	url	https://projects.spring.io/spring-data-jpa	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	groupid	springframework.data	Highest
Vendor	pom	artifactid	spring-data-jpa	Low
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	Spring Data JPA	High
Vendor	pom	groupid	org.springframework.data	Highest
Vendor	file	name	spring-data-jpa	High
Vendor	Manifest	automatic-module-name	spring.data.jpa	Medium
Vendor	pom	parent-groupid	org.springframework.data.build	Medium
Product	jar	package name	data	Highest
Product	pom	parent-artifactid	spring-data-parent	Medium
Product	Manifest	Implementation-Title	Spring Data JPA	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	artifactid	spring-data-jpa	Highest
Product	jar	package name	jpa	Highest
Product	pom	groupid	springframework.data	Highest
Product	jar	package name	springframework	Highest
Product	pom	name	Spring Data JPA	High
Product	file	name	spring-data-jpa	High
Product	pom	url	https://projects.spring.io/spring-data-jpa	Medium
Product	Manifest	automatic-module-name	spring.data.jpa	Medium
Product	pom	parent-groupid	org.springframework.data.build	Medium
Version	Manifest	Implementation-Version	2.5.3	High
Version	pom	version	2.5.3	Highest
Version	file	version	2.5.3	High

Identifiers

pkg:maven/org.springframework.data/spring-data-jpa@2.5.3 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_data_jpa:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-expression-5.3.9.jar

Description:

Spring Expression Language (SpEL)

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-expression/5.3.9/spring-expression-5.3.9.jar
MD5: caa5992be3ae62995f5a2de9bee7575b
SHA1: f5ca763cfb9d62d196efd5d25e8daca7d555ed75
SHA256:4dcd27638170fe0649c6e394c2668448af2f0473d5550407c0e82b73a497cb2a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-expression	High
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	pom	name	Spring Expression Language (SpEL)	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	Manifest	automatic-module-name	spring.expression	Medium
Vendor	pom	groupid	springframework	Highest
Vendor	pom	artifactid	spring-expression	Low
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	jar	package name	spel	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	expression	Highest
Product	file	name	spring-expression	High
Product	pom	name	Spring Expression Language (SpEL)	High
Product	Manifest	Implementation-Title	spring-expression	High
Product	Manifest	automatic-module-name	spring.expression	Medium
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	artifactid	spring-expression	Highest
Product	jar	package name	spel	Highest
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	jar	package name	expression	Highest
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-expression@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-hateoas-1.3.3.jar

Description:

		Library to support implementing representations for
		hyper-text driven REST web services.

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/hateoas/spring-hateoas/1.3.3/spring-hateoas-1.3.3.jar
MD5: 8a4e4e5ba698450fdd121f9b49a38da7
SHA1: 63b4062991ee3158c92c6627ce19044b437afb7c
SHA256:c4d45c1969d122286da2c6018fa4bddfa1444aad4ea2da27de80ec313913b78c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.springframework.hateoas	Highest
Vendor	jar	package name	hateoas	Highest
Vendor	pom	name	Spring HATEOAS	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization url	https://www.spring.io	Medium
Vendor	pom	groupid	springframework.hateoas	Highest
Vendor	jar	package name	support	Highest
Vendor	pom	artifactid	spring-hateoas	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	file	name	spring-hateoas	High
Vendor	pom	organization name	Pivotal, Inc.	High
Vendor	jar	package name	springframework	Highest
Vendor	Manifest	automatic-module-name	spring.hateoas	Medium
Vendor	pom	url	spring-projects/spring-hateoas	Highest
Product	jar	package name	hateoas	Highest
Product	pom	name	Spring HATEOAS	High
Product	pom	url	spring-projects/spring-hateoas	High
Product	pom	organization name	Pivotal, Inc.	Low
Product	pom	organization url	https://www.spring.io	Low
Product	pom	groupid	springframework.hateoas	Highest
Product	jar	package name	support	Highest
Product	pom	artifactid	spring-hateoas	Highest
Product	file	name	spring-hateoas	High
Product	Manifest	Implementation-Title	Spring HATEOAS	High
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.hateoas	Medium
Version	Manifest	Implementation-Version	1.3.3	High
Version	file	version	1.3.3	High
Version	pom	version	1.3.3	Highest

Identifiers

pkg:maven/org.springframework.hateoas/spring-hateoas@1.3.3 (Confidence:High)
cpe:2.3:a:vmware:spring_framework:1.3.3:*:*:*:*:*:*:* (Confidence:Highest)

spring-jcl-5.3.9.jar

Description:

Spring Commons Logging Bridge

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-jcl/5.3.9/spring-jcl-5.3.9.jar
MD5: 2ce2d56c1a32998a261a45830ff956da
SHA1: 622eb12c98768b6d3acc71ce06bac8b332607a10
SHA256:8440e87ac0a9789819d4b10d730debc09875b5acb285239d50bccc57a171c227
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	artifactid	spring-jcl	Low
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	file	name	spring-jcl	High
Vendor	pom	name	Spring Commons Logging Bridge	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	Manifest	automatic-module-name	spring.jcl	Medium
Vendor	jar	package name	commons	Highest
Vendor	jar	package name	logging	Highest
Product	pom	artifactid	spring-jcl	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	file	name	spring-jcl	High
Product	pom	name	Spring Commons Logging Bridge	High
Product	Manifest	Implementation-Title	spring-jcl	High
Product	Manifest	automatic-module-name	spring.jcl	Medium
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	jar	package name	commons	Highest
Product	jar	package name	logging	Highest
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-jcl@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-jdbc-5.3.9.jar

Description:

Spring JDBC

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-jdbc/5.3.9/spring-jdbc-5.3.9.jar
MD5: df64f2824414998da06fb4684c7c4d05
SHA1: 18efdbd53c154a08e1854a6cff29c2becea04025
SHA256:c08b6e7bb459d5ccd73c125c24cae74527ac35dfd8a82b2cc8a22990ce6f273a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.jdbc	Medium
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	file	name	spring-jdbc	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	pom	name	Spring JDBC	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	artifactid	spring-jdbc	Low
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	jdbc	Highest
Vendor	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.jdbc	Medium
Product	file	name	spring-jdbc	High
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	pom	name	Spring JDBC	High
Product	pom	artifactid	spring-jdbc	Highest
Product	jar	package name	jdbc	Highest
Product	Manifest	Implementation-Title	spring-jdbc	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-jdbc@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-orm-5.3.9.jar

Description:

Spring Object/Relational Mapping

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-orm/5.3.9/spring-orm-5.3.9.jar
MD5: 0f4497f84fb520db24ee9ad634190420
SHA1: db37587efd6525283b53c7adc8989095e9eabc27
SHA256:d6b29242cacfd5b8b96726ad1bb8e03a25a2c1b73ce99ae026acf775c2eff343
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	orm	Highest
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	Manifest	automatic-module-name	spring.orm	Medium
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	name	Spring Object/Relational Mapping	High
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	artifactid	spring-orm	Low
Vendor	file	name	spring-orm	High
Product	jar	package name	orm	Highest
Product	pom	artifactid	spring-orm	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	Manifest	automatic-module-name	spring.orm	Medium
Product	Manifest	Implementation-Title	spring-orm	High
Product	pom	name	Spring Object/Relational Mapping	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Product	file	name	spring-orm	High
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-orm@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-plugin-core-2.0.0.RELEASE.jar

Description:

Core plugin infrastructure

File Path: /home/jenkins/.mvnrepository/org/springframework/plugin/spring-plugin-core/2.0.0.RELEASE/spring-plugin-core-2.0.0.RELEASE.jar
MD5: a89cd7b77db3ed7d0c9ea71ee9784e2e
SHA1: 95fc8c13037630f4aba9c51141f535becec00fe6
SHA256:6e6d026d6b572495533692173a264c6959f48d5ef7f3d6faf4555a577d4a38d2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.plugin.core	Medium
Vendor	pom	artifactid	spring-plugin-core	Low
Vendor	pom	groupid	springframework.plugin	Highest
Vendor	pom	name	Spring Plugin - Core	High
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	plugin	Highest
Vendor	pom	parent-artifactid	spring-plugin	Low
Vendor	jar	package name	core	Highest
Vendor	file	name	spring-plugin-core	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.plugin	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	parent-groupid	org.springframework.plugin	Medium
Product	Manifest	automatic-module-name	spring.plugin.core	Medium
Product	pom	parent-artifactid	spring-plugin	Medium
Product	pom	groupid	springframework.plugin	Highest
Product	pom	name	Spring Plugin - Core	High
Product	jar	package name	plugin	Highest
Product	Manifest	Implementation-Title	Spring Plugin - Core	High
Product	jar	package name	springframework	Highest
Product	jar	package name	core	Highest
Product	pom	parent-groupid	org.springframework.plugin	Medium
Product	file	name	spring-plugin-core	High
Product	pom	artifactid	spring-plugin-core	Highest
Version	Manifest	Implementation-Version	2.0.0.RELEASE	High
Version	pom	version	2.0.0.RELEASE	Highest

Identifiers

pkg:maven/org.springframework.plugin/spring-plugin-core@2.0.0.RELEASE (Confidence:High)
cpe:2.3:a:vmware:spring_framework:2.0.0:release:*:*:*:*:*:* (Confidence:Highest)

spring-security-config-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-config/5.5.1/spring-security-config-5.5.1.jar
MD5: 35364ab9c3f46c35de3adf46cdd859c9
SHA1: a4610e934dd52d7871bf2f3e923dfee99be76636
SHA256:568677c97cb08f797fb2944880debc9495f0650cab1bd7daa99e112d5b610bb5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	jar	package name	config	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	automatic-module-name	spring.security.config	Medium
Vendor	file	name	spring-security-config	High
Vendor	pom	artifactid	spring-security-config	Low
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	spring-security-config	High
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	pom	artifactid	spring-security-config	Highest
Product	jar	package name	security	Highest
Product	jar	package name	config	Highest
Product	Manifest	automatic-module-name	spring.security.config	Medium
Product	Manifest	Implementation-Title	spring-security-config	High
Product	file	name	spring-security-config	High
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	springframework	Highest
Product	pom	name	spring-security-config	High
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-config@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-core-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-core/5.5.1/spring-security-core-5.5.1.jar
MD5: 7c10424daefebf7f5db0824447549447
SHA1: e7cc9d0e918d97419fcc97f08cdade945b1144d7
SHA256:8004757659c0dd60b25bd1e86403784e76092b8c1b12822d96d8327b9f013ca8
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	core	Highest
Vendor	pom	name	spring-security-core	High
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	file	name	spring-security-core	High
Vendor	jar	package name	springframework	Highest
Vendor	pom	artifactid	spring-security-core	Low
Vendor	Manifest	automatic-module-name	spring.security.core	Medium
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	security	Highest
Product	jar	package name	core	Highest
Product	pom	name	spring-security-core	High
Product	Manifest	Implementation-Title	spring-security-core	High
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	artifactid	spring-security-core	Highest
Product	pom	organization url	https://spring.io	Low
Product	file	name	spring-security-core	High
Product	jar	package name	springframework	Highest
Product	Manifest	automatic-module-name	spring.security.core	Medium
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-core@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-crypto-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-crypto/5.5.1/spring-security-crypto-5.5.1.jar
MD5: ff260a2cc7ee6a819630c9b5a8c72860
SHA1: 37ca67b6ff195b00bd29e65206c74017ca90239e
SHA256:8994e0d6383e99096f8ff233b8a4233d978b312ddd8ced590f8c9c016d5f396f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	name	spring-security-crypto	High
Vendor	pom	artifactid	spring-security-crypto	Low
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	crypto	Highest
Vendor	jar	package name	springframework	Highest
Vendor	file	name	spring-security-crypto	High
Vendor	Manifest	automatic-module-name	spring.security.crypto	Medium
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	security	Highest
Product	pom	name	spring-security-crypto	High
Product	pom	artifactid	spring-security-crypto	Highest
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	crypto	Highest
Product	Manifest	Implementation-Title	spring-security-crypto	High
Product	jar	package name	springframework	Highest
Product	file	name	spring-security-crypto	High
Product	Manifest	automatic-module-name	spring.security.crypto	Medium
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-crypto@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-jwt-1.1.1.RELEASE.jar

Description:

Spring Security JWT is a small utility library for encoding and decoding JSON Web Tokens.
	It belongs to the family of Spring Security crypto libraries that handle encoding and decoding text as
	a general, useful thing to be able to do.

License:

Apache 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-jwt/1.1.1.RELEASE/spring-security-jwt-1.1.1.RELEASE.jar
MD5: 703d7744e66813c46202efbbf645ac8e
SHA1: 32a64cdbe06b8aa8fe98e59689cf0c377725868b
SHA256:acc5a1e0eeeffde0d7b8a18cdbe3245915e00203f90e98db7f3b7dbdeea75e5a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	name	Spring Security JWT Library	High
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	jar	package name	jwt	Highest
Vendor	pom	organization url	https://www.springsource.com	Medium
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	artifactid	spring-security-jwt	Low
Vendor	pom	url	spring-projects/spring-security-oauth	Highest
Vendor	pom	organization name	SpringSource	High
Vendor	jar	package name	crypto	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	security	Low
Vendor	file	name	spring-security-jwt	High
Vendor	jar	package name	springframework	Low
Vendor	jar	package name	jwt	Low
Product	jar	package name	security	Highest
Product	pom	organization name	SpringSource	Low
Product	pom	name	Spring Security JWT Library	High
Product	pom	artifactid	spring-security-jwt	Highest
Product	pom	url	spring-projects/spring-security-oauth	High
Product	pom	groupid	springframework.security	Highest
Product	jar	package name	jwt	Highest
Product	pom	organization url	https://www.springsource.com	Low
Product	jar	package name	crypto	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	security	Low
Product	file	name	spring-security-jwt	High
Product	jar	package name	jwt	Low
Version	pom	version	1.1.1.RELEASE	Highest

Identifiers

pkg:maven/org.springframework.security/spring-security-jwt@1.1.1.RELEASE (Confidence:High)
cpe:2.3:a:pivotal_software:spring_security:1.1.1:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:1.1.1:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:1.1.1:release:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-2.5.0.RELEASE.jar

Description:

Module for providing OAuth2 support to Spring Security

File Path: /home/jenkins/.mvnrepository/org/springframework/security/oauth/spring-security-oauth2/2.5.0.RELEASE/spring-security-oauth2-2.5.0.RELEASE.jar
MD5: 24f3fb1f36d13103e0e5d65c0309d4d0
SHA1: 853f4c0e69d4690be4fff0c3dee8f696dd017373
SHA256:161284e83cefdb54d4f152757f7f63d4e9d8b40967f4f4cd98c1b858dab3561a
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	org.springframework.security.oauth	Highest
Vendor	file	name	spring-security-oauth2	High
Vendor	jar	package name	security	Highest
Vendor	pom	parent-artifactid	spring-security-oauth-parent	Low
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	oauth2	Highest
Vendor	jar	package name	oauth2	Low
Vendor	pom	artifactid	spring-security-oauth2	Low
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	name	OAuth2 for Spring Security	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	springframework.security.oauth	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	security	Low
Vendor	jar	package name	springframework	Low
Vendor	pom	parent-groupid	org.springframework.security.oauth	Medium
Product	file	name	spring-security-oauth2	High
Product	jar	package name	security	Highest
Product	pom	name	OAuth2 for Spring Security	High
Product	pom	artifactid	spring-security-oauth2	Highest
Product	pom	groupid	springframework.security.oauth	Highest
Product	pom	parent-artifactid	spring-security-oauth-parent	Medium
Product	jar	package name	springframework	Highest
Product	jar	package name	oauth2	Highest
Product	jar	package name	security	Low
Product	jar	package name	oauth2	Low
Product	pom	parent-groupid	org.springframework.security.oauth	Medium
Version	pom	version	2.5.0.RELEASE	Highest

Identifiers

pkg:maven/org.springframework.security.oauth/spring-security-oauth2@2.5.0.RELEASE (Confidence:High)
cpe:2.3:a:pivotal:spring_security_oauth:2.5.0:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:2.5.0:release:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:2.5.0:release:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-autoconfigure-2.4.2.jar

Description:

spring-security-oauth2-autoconfigure

License:

The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/springframework/security/oauth/boot/spring-security-oauth2-autoconfigure/2.4.2/spring-security-oauth2-autoconfigure-2.4.2.jar
MD5: c8329e77126880f97afb394af0973200
SHA1: 30b138d7356cde72a3766186a82119dd4ed27648
SHA256:60a6f6a10f6f9ce841daf5ddba923940cd70313c2b5ac6f9b1eb941a9a717bb3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	springframework.security.oauth.boot	Highest
Vendor	pom	url	https://spring.io/spring-security	Highest
Vendor	jar	package name	security	Highest
Vendor	jar	package name	autoconfigure	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	file	name	spring-security-oauth2-autoconfigure	High
Vendor	pom	groupid	org.springframework.security.oauth.boot	Highest
Vendor	pom	organization name	spring.io	High
Vendor	Manifest	automatic-module-name	spring.security.oauth2.autoconfigure	Medium
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	artifactid	spring-security-oauth2-autoconfigure	Low
Vendor	pom	name	spring-security-oauth2-autoconfigure	High
Vendor	jar	package name	springframework	Highest
Vendor	pom	organization url	https://spring.io/	Medium
Vendor	jar	package name	boot	Highest
Product	pom	url	https://spring.io/spring-security	Medium
Product	pom	groupid	springframework.security.oauth.boot	Highest
Product	jar	package name	security	Highest
Product	jar	package name	autoconfigure	Highest
Product	file	name	spring-security-oauth2-autoconfigure	High
Product	Manifest	Implementation-Title	spring-security-oauth2-autoconfigure	High
Product	pom	organization name	spring.io	Low
Product	Manifest	automatic-module-name	spring.security.oauth2.autoconfigure	Medium
Product	pom	name	spring-security-oauth2-autoconfigure	High
Product	jar	package name	springframework	Highest
Product	jar	package name	boot	Highest
Product	pom	artifactid	spring-security-oauth2-autoconfigure	Highest
Product	pom	organization url	https://spring.io/	Low
Version	pom	version	2.4.2	Highest
Version	Manifest	Implementation-Version	2.4.2	High
Version	file	version	2.4.2	High

Identifiers

pkg:maven/org.springframework.security.oauth.boot/spring-security-oauth2-autoconfigure@2.4.2 (Confidence:High)
cpe:2.3:a:vmware:spring_framework:2.4.2:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:2.4.2:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-client-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-oauth2-client/5.5.1/spring-security-oauth2-client-5.5.1.jar
MD5: 9d63e7dad822dc4c4753899a1eac9881
SHA1: 38a84a2f290e89525356992f19e41a402dc53834
SHA256:3c2a947ab94f0bb7ef85ab7d1276f5858e93f6ee1bbbf91c046be7d73ad4c781
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-security-oauth2-client	Low
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	Manifest	automatic-module-name	spring.security.oauth2.client	Medium
Vendor	jar	package name	oauth2	Highest
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	file	name	spring-security-oauth2-client	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	spring-security-oauth2-client	High
Vendor	jar	package name	client	Highest
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	artifactid	spring-security-oauth2-client	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	security	Highest
Product	Manifest	Implementation-Title	spring-security-oauth2-client	High
Product	Manifest	automatic-module-name	spring.security.oauth2.client	Medium
Product	jar	package name	oauth2	Highest
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	file	name	spring-security-oauth2-client	High
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	springframework	Highest
Product	pom	name	spring-security-oauth2-client	High
Product	jar	package name	client	Highest
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-oauth2-client@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-core-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-oauth2-core/5.5.1/spring-security-oauth2-core-5.5.1.jar
MD5: 28314c3ce49fe627b5ab1aaefc010452
SHA1: 4bf6900ad4e532a384ea206ab16e9b4ebf7abfa3
SHA256:30f2157a2399ecaa207b902ff6910eedcf7be62dfac6bfa4145c433933adc7d2
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	spring-security-oauth2-core	High
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	oauth2	Highest
Vendor	jar	package name	core	Highest
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	artifactid	spring-security-oauth2-core	Low
Vendor	pom	name	spring-security-oauth2-core	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	Manifest	automatic-module-name	spring.security.oauth2.core	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	file	name	spring-security-oauth2-core	High
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	security	Highest
Product	jar	package name	oauth2	Highest
Product	Manifest	Implementation-Title	spring-security-oauth2-core	High
Product	jar	package name	core	Highest
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	organization url	https://spring.io	Low
Product	pom	name	spring-security-oauth2-core	High
Product	Manifest	automatic-module-name	spring.security.oauth2.core	Medium
Product	jar	package name	springframework	Highest
Product	pom	artifactid	spring-security-oauth2-core	Highest
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-oauth2-core@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-jose-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-oauth2-jose/5.5.1/spring-security-oauth2-jose-5.5.1.jar
MD5: 044d8a8a0c7784c5d133f8dc611d8853
SHA1: 17363bdae49bd41f44cf12a5044d011577559b92
SHA256:6f316b6a6b2f470843dd82172506e9f29a5f9cd5a7aa4bb4c21324a21f25dc90
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	automatic-module-name	spring.security.oauth2.jose	Medium
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	file	name	spring-security-oauth2-jose	High
Vendor	jar	package name	oauth2	Highest
Vendor	pom	artifactid	spring-security-oauth2-jose	Low
Vendor	jar	package name	jose	Highest
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	spring-security-oauth2-jose	High
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	Manifest	automatic-module-name	spring.security.oauth2.jose	Medium
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	Manifest	Implementation-Title	spring-security-oauth2-jose	High
Product	pom	artifactid	spring-security-oauth2-jose	Highest
Product	jar	package name	security	Highest
Product	file	name	spring-security-oauth2-jose	High
Product	jar	package name	oauth2	Highest
Product	jar	package name	jose	Highest
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	organization url	https://spring.io	Low
Product	jar	package name	springframework	Highest
Product	pom	name	spring-security-oauth2-jose	High
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-oauth2-jose@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-oauth2-resource-server-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-oauth2-resource-server/5.5.1/spring-security-oauth2-resource-server-5.5.1.jar
MD5: 5e3eac8335c8a78d61f1dde060e57b4e
SHA1: 765a3dc505a3611d125ded49d33df14e681803d8
SHA256:6d6088b01a47147d1f02b6566c643c12e3875b469f6c85ae15e32fb085b4edb3
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	server	Highest
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	jar	package name	oauth2	Highest
Vendor	pom	name	spring-security-oauth2-resource-server	High
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	file	name	spring-security-oauth2-resource-server	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	Manifest	automatic-module-name	spring.security.oauth2.resource.server	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	artifactid	spring-security-oauth2-resource-server	Low
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	server	Highest
Product	jar	package name	security	Highest
Product	jar	package name	oauth2	Highest
Product	pom	name	spring-security-oauth2-resource-server	High
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	file	name	spring-security-oauth2-resource-server	High
Product	Manifest	Implementation-Title	spring-security-oauth2-resource-server	High
Product	pom	organization url	https://spring.io	Low
Product	pom	artifactid	spring-security-oauth2-resource-server	Highest
Product	Manifest	automatic-module-name	spring.security.oauth2.resource.server	Medium
Product	jar	package name	springframework	Highest
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-oauth2-resource-server@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:pivotal_software:spring_security_oauth:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:server:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-security-web-5.5.1.jar

Description:

Spring Security

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-web/5.5.1/spring-security-web-5.5.1.jar
MD5: d5da4e7547093b49216dc7d699ef65ef
SHA1: e042c61f262096193a021f635511cc3922a78510
SHA256:9ae2c068209024b697c661ef6f0d0f20c0ff898d9c9724f8fd371f63d3a9f451
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization name	Pivotal Software, Inc.	High
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	file	name	spring-security-web	High
Vendor	pom	artifactid	spring-security-web	Low
Vendor	jar	package name	web	Highest
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	organization url	https://spring.io	Medium
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	spring-security-web	High
Vendor	Manifest	automatic-module-name	spring.security.web	Medium
Vendor	pom	url	https://spring.io/projects/spring-security	Highest
Product	pom	organization name	Pivotal Software, Inc.	Low
Product	jar	package name	security	Highest
Product	file	name	spring-security-web	High
Product	jar	package name	web	Highest
Product	pom	groupid	springframework.security	Highest
Product	pom	url	https://spring.io/projects/spring-security	Medium
Product	pom	artifactid	spring-security-web	Highest
Product	pom	organization url	https://spring.io	Low
Product	Manifest	Implementation-Title	spring-security-web	High
Product	jar	package name	springframework	Highest
Product	pom	name	spring-security-web	High
Product	Manifest	automatic-module-name	spring.security.web	Medium
Version	Manifest	Implementation-Version	5.5.1	High
Version	pom	version	5.5.1	Highest
Version	file	version	5.5.1	High

Identifiers

pkg:maven/org.springframework.security/spring-security-web@5.5.1 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_security:5.5.1:*:*:*:*:*:*:* (Confidence:Highest)

spring-tx-5.3.9.jar

Description:

Spring Transaction

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-tx/5.3.9/spring-tx-5.3.9.jar
MD5: 47c64fc0f118080d2e90ba4499086d88
SHA1: a7057cf30368d014a1c8e5880a128703c890ec79
SHA256:d9bb0189220d266cfe4a76496dac0b6adcd945eee19bc764063c7d058f7521e8
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	Manifest	automatic-module-name	spring.tx	Medium
Vendor	pom	artifactid	spring-tx	Low
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	file	name	spring-tx	High
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	name	Spring Transaction	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	jar	package name	transaction	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Product	pom	artifactid	spring-tx	Highest
Product	Manifest	automatic-module-name	spring.tx	Medium
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	file	name	spring-tx	High
Product	Manifest	Implementation-Title	spring-tx	High
Product	pom	name	Spring Transaction	High
Product	jar	package name	transaction	Highest
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-tx@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-web-5.3.9.jar

Description:

Spring Web

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-web/5.3.9/spring-web-5.3.9.jar
MD5: da5279d25d36b18f599829f5723d338c
SHA1: 88c920ec1bda67fea04daa8e16165777440df473
SHA256:c8f11853b18f46d30a1bd263eec8de30efafaba5acfa412a2e62ea082b3aaa62
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-web	Low
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	Manifest	automatic-module-name	spring.web	Medium
Vendor	jar	package name	web	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	file	name	spring-web	High
Vendor	pom	groupid	org.springframework	Highest
Vendor	jar	package name	springframework	Highest
Vendor	pom	name	Spring Web	High
Product	pom	artifactid	spring-web	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	Manifest	automatic-module-name	spring.web	Medium
Product	jar	package name	web	Highest
Product	file	name	spring-web	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	pom	organization name	Spring IO	Low
Product	pom	name	Spring Web	High
Product	Manifest	Implementation-Title	spring-web	High
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-web@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

spring-webmvc-5.3.9.jar

Description:

Spring Web MVC

License:

Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/.mvnrepository/org/springframework/spring-webmvc/5.3.9/spring-webmvc-5.3.9.jar
MD5: 2daca10e719c81776ff73c4c267a7de9
SHA1: c3cd1f0bba2658995e887d2f0011ab9bd3da1773
SHA256:ab3152e8dea26ff84c0d3a270c4f65ae56877bb198fd38dfe4e7368cc9b8df7b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	spring-webmvc	Low
Vendor	pom	organization url	https://spring.io/projects/spring-framework	Medium
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	organization name	Spring IO	High
Vendor	Manifest	automatic-module-name	spring.webmvc	Medium
Vendor	jar	package name	mvc	Highest
Vendor	pom	groupid	springframework	Highest
Vendor	pom	url	spring-projects/spring-framework	Highest
Vendor	jar	package name	web	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	pom	name	Spring Web MVC	High
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework	Highest
Vendor	file	name	spring-webmvc	High
Vendor	jar	package name	springframework	Highest
Product	pom	artifactid	spring-webmvc	Highest
Product	Manifest	automatic-module-name	spring.webmvc	Medium
Product	jar	package name	mvc	Highest
Product	pom	groupid	springframework	Highest
Product	pom	organization url	https://spring.io/projects/spring-framework	Low
Product	jar	package name	web	Highest
Product	pom	name	Spring Web MVC	High
Product	file	name	spring-webmvc	High
Product	jar	package name	springframework	Highest
Product	pom	url	spring-projects/spring-framework	High
Product	Manifest	Implementation-Title	spring-webmvc	High
Product	pom	organization name	Spring IO	Low
Product	hint analyzer	product	springsource_spring_framework	Highest
Version	pom	version	5.3.9	Highest
Version	file	version	5.3.9	High
Version	Manifest	Implementation-Version	5.3.9	High

Identifiers

pkg:maven/org.springframework/spring-webmvc@5.3.9 (Confidence:High)
cpe:2.3:a:pivotal_software:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:springsource:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:vmware:springsource_spring_framework:5.3.9:*:*:*:*:*:*:* (Confidence:Low)

springdoc-openapi-common-1.2.32.jar

File Path: /home/jenkins/.mvnrepository/org/springdoc/springdoc-openapi-common/1.2.32/springdoc-openapi-common-1.2.32.jar
MD5: e2aacb4423b0c11d33bbe090a251420e
SHA1: 089dac17e97c4e41fcd0227370f9a3213e99574d
SHA256:261e12fa645c9ea74f004745268a7d15957816815c91bf472c29051eb06c88fd
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	springdoc	Highest
Vendor	file	name	springdoc-openapi-common	High
Vendor	pom	parent-groupid	org.springdoc	Medium
Vendor	pom	parent-artifactid	springdoc-openapi	Low
Vendor	pom	groupid	org.springdoc	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	springdoc	Highest
Vendor	pom	artifactid	springdoc-openapi-common	Low
Vendor	pom	name	${project.artifactId}	High
Product	pom	groupid	springdoc	Highest
Product	file	name	springdoc-openapi-common	High
Product	pom	artifactid	springdoc-openapi-common	Highest
Product	pom	parent-groupid	org.springdoc	Medium
Product	Manifest	Implementation-Title	springdoc-openapi-common	High
Product	pom	parent-artifactid	springdoc-openapi	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	springdoc	Highest
Product	pom	name	${project.artifactId}	High
Version	Manifest	Implementation-Version	1.2.32	High
Version	pom	version	1.2.32	Highest
Version	file	version	1.2.32	High

Identifiers

pkg:maven/org.springdoc/springdoc-openapi-common@1.2.32 (Confidence:High)

springdoc-openapi-ui-1.2.32.jar

File Path: /home/jenkins/.mvnrepository/org/springdoc/springdoc-openapi-ui/1.2.32/springdoc-openapi-ui-1.2.32.jar
MD5: b4655bb295c09862610469ccf42c0066
SHA1: 473ccb692becebd121577fdff0b61e4c9914b3eb
SHA256:91792e7e30d22827ae304090f0a94fc76b4f7671d36395d8a3461dc18c55b917
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	springdoc-openapi-ui	High
Vendor	pom	groupid	springdoc	Highest
Vendor	pom	parent-groupid	org.springdoc	Medium
Vendor	pom	parent-artifactid	springdoc-openapi	Low
Vendor	pom	artifactid	springdoc-openapi-ui	Low
Vendor	pom	groupid	org.springdoc	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	springdoc	Highest
Vendor	jar	package name	ui	Highest
Vendor	pom	name	${project.artifactId}	High
Product	file	name	springdoc-openapi-ui	High
Product	pom	groupid	springdoc	Highest
Product	Manifest	Implementation-Title	springdoc-openapi-ui	High
Product	pom	artifactid	springdoc-openapi-ui	Highest
Product	pom	parent-groupid	org.springdoc	Medium
Product	pom	parent-artifactid	springdoc-openapi	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	springdoc	Highest
Product	jar	package name	ui	Highest
Product	pom	name	${project.artifactId}	High
Version	Manifest	Implementation-Version	1.2.32	High
Version	pom	version	1.2.32	Highest
Version	file	version	1.2.32	High

Identifiers

pkg:maven/org.springdoc/springdoc-openapi-ui@1.2.32 (Confidence:High)

springdoc-openapi-webmvc-core-1.2.32.jar

File Path: /home/jenkins/.mvnrepository/org/springdoc/springdoc-openapi-webmvc-core/1.2.32/springdoc-openapi-webmvc-core-1.2.32.jar
MD5: 93a0a50f76506bfa2fe4f11d5e5026e3
SHA1: caad2a403f73fb61eb2f98c592f8785f76fd827a
SHA256:973b13759b0ae116f0cfd9b2d9ac0b1171799d49509d80cf85658375db22c077
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	springdoc	Highest
Vendor	file	name	springdoc-openapi-webmvc-core	High
Vendor	pom	parent-groupid	org.springdoc	Medium
Vendor	pom	parent-artifactid	springdoc-openapi	Low
Vendor	pom	artifactid	springdoc-openapi-webmvc-core	Low
Vendor	pom	groupid	org.springdoc	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	core	Highest
Vendor	jar	package name	springdoc	Highest
Vendor	pom	name	${project.artifactId}	High
Product	pom	groupid	springdoc	Highest
Product	file	name	springdoc-openapi-webmvc-core	High
Product	pom	parent-groupid	org.springdoc	Medium
Product	pom	parent-artifactid	springdoc-openapi	Medium
Product	jar	package name	core	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	springdoc	Highest
Product	pom	name	${project.artifactId}	High
Product	pom	artifactid	springdoc-openapi-webmvc-core	Highest
Product	Manifest	Implementation-Title	springdoc-openapi-webmvc-core	High
Version	Manifest	Implementation-Version	1.2.32	High
Version	pom	version	1.2.32	Highest
Version	file	version	1.2.32	High

Identifiers

pkg:maven/org.springdoc/springdoc-openapi-webmvc-core@1.2.32 (Confidence:High)

swagger-annotations-2.1.1.jar

License:

http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/jenkins/.mvnrepository/io/swagger/core/v3/swagger-annotations/2.1.1/swagger-annotations-2.1.1.jar
MD5: 474583342ea1968dc0d624c9d37c1aa5
SHA1: 4d645f0d4a1ec1f13bef19ad1b10e72b30fe9307
SHA256:a138af458693ef5edd32869260e49becaf02a370619e031f817e215275cc48a1
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	mode	development	Low
Vendor	pom	groupid	io.swagger.core.v3	Highest
Vendor	jar	package name	io	Highest
Vendor	pom	artifactid	swagger-annotations	Low
Vendor	Manifest	automatic-module-name	io.swagger.v3.oas.annotations	Medium
Vendor	pom	parent-artifactid	swagger-project	Low
Vendor	file	name	swagger-annotations	High
Vendor	jar	package name	swagger	Highest
Vendor	jar	package name	v3	Highest
Vendor	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-annotations	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-annotations	Medium
Vendor	jar	package name	oas	Highest
Vendor	pom	name	swagger-annotations	High
Product	Manifest	mode	development	Low
Product	pom	groupid	io.swagger.core.v3	Highest
Product	jar	package name	io	Highest
Product	Manifest	automatic-module-name	io.swagger.v3.oas.annotations	Medium
Product	file	name	swagger-annotations	High
Product	pom	parent-artifactid	swagger-project	Medium
Product	jar	package name	swagger	Highest
Product	jar	package name	v3	Highest
Product	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-annotations	Low
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	artifactid	swagger-annotations	Highest
Product	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-annotations	Medium
Product	jar	package name	oas	Highest
Product	Manifest	Bundle-Name	swagger-annotations	Medium
Product	pom	name	swagger-annotations	High
Version	file	version	2.1.1	High
Version	Manifest	implementation-version	2.1.1	High
Version	Manifest	Bundle-Version	2.1.1	High
Version	pom	version	2.1.1	Highest

Identifiers

pkg:maven/io.swagger.core.v3/swagger-annotations@2.1.1 (Confidence:High)

swagger-core-2.1.1.jar

License:

http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/jenkins/.mvnrepository/io/swagger/core/v3/swagger-core/2.1.1/swagger-core-2.1.1.jar
MD5: 2a6af5f5deb819f3688d980f38d35522
SHA1: 7c8d69356c3521734f0225ce6ea15d6b26b1eecc
SHA256:c322a84c5fe8ca4e762f61bd50e283be6dca7065dd1f07b0199bcf41f027e48f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	mode	development	Low
Vendor	pom	groupid	io.swagger.core.v3	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-core	Low
Vendor	Manifest	automatic-module-name	io.swagger.v3.core	Medium
Vendor	jar	package name	core	Highest
Vendor	pom	parent-artifactid	swagger-project	Low
Vendor	pom	name	swagger-core	High
Vendor	jar	package name	swagger	Highest
Vendor	jar	package name	v3	Highest
Vendor	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-core	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	artifactid	swagger-core	Low
Vendor	file	name	swagger-core	High
Product	Manifest	mode	development	Low
Product	pom	groupid	io.swagger.core.v3	Highest
Product	jar	package name	io	Highest
Product	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-core	Low
Product	Manifest	automatic-module-name	io.swagger.v3.core	Medium
Product	Manifest	Bundle-Name	swagger-core	Medium
Product	pom	artifactid	swagger-core	Highest
Product	jar	package name	core	Highest
Product	pom	name	swagger-core	High
Product	pom	parent-artifactid	swagger-project	Medium
Product	jar	package name	swagger	Highest
Product	jar	package name	v3	Highest
Product	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-core	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	file	name	swagger-core	High
Version	file	version	2.1.1	High
Version	Manifest	implementation-version	2.1.1	High
Version	Manifest	Bundle-Version	2.1.1	High
Version	pom	version	2.1.1	Highest

Identifiers

pkg:maven/io.swagger.core.v3/swagger-core@2.1.1 (Confidence:High)

swagger-integration-2.1.1.jar

License:

http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/jenkins/.mvnrepository/io/swagger/core/v3/swagger-integration/2.1.1/swagger-integration-2.1.1.jar
MD5: 7ce4d1435e77c69a7d6e19f4a0c0e9c0
SHA1: 79454bd29a5d133d7cc15f9062488399fbe96c06
SHA256:4853b2bb894570d0fbb104a98b3b20e7ae0db195aa52836eaebc5c0e94ed79d4
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	mode	development	Low
Vendor	pom	artifactid	swagger-integration	Low
Vendor	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-integration	Medium
Vendor	pom	groupid	io.swagger.core.v3	Highest
Vendor	jar	package name	io	Highest
Vendor	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-integration	Low
Vendor	Manifest	automatic-module-name	io.swagger.v3.oas.integration	Medium
Vendor	pom	parent-artifactid	swagger-project	Low
Vendor	jar	package name	swagger	Highest
Vendor	jar	package name	v3	Highest
Vendor	file	name	swagger-integration	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	swagger-integration	High
Vendor	jar	package name	oas	Highest
Product	pom	artifactid	swagger-integration	Highest
Product	Manifest	mode	development	Low
Product	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-integration	Medium
Product	pom	groupid	io.swagger.core.v3	Highest
Product	Manifest	Bundle-Name	swagger-integration	Medium
Product	jar	package name	io	Highest
Product	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-integration	Low
Product	Manifest	automatic-module-name	io.swagger.v3.oas.integration	Medium
Product	pom	parent-artifactid	swagger-project	Medium
Product	jar	package name	swagger	Highest
Product	jar	package name	v3	Highest
Product	file	name	swagger-integration	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	pom	name	swagger-integration	High
Product	jar	package name	oas	Highest
Version	file	version	2.1.1	High
Version	Manifest	implementation-version	2.1.1	High
Version	Manifest	Bundle-Version	2.1.1	High
Version	pom	version	2.1.1	Highest

Identifiers

pkg:maven/io.swagger.core.v3/swagger-integration@2.1.1 (Confidence:High)

swagger-models-2.1.1.jar

License:

http://www.apache.org/licenses/LICENSE-2.0.html

File Path: /home/jenkins/.mvnrepository/io/swagger/core/v3/swagger-models/2.1.1/swagger-models-2.1.1.jar
MD5: d837ea4186b7f7e35ea3c88d74512496
SHA1: 9c18e2c834dee2b6c8ec2b67259fdaef2adba3c0
SHA256:fb190ca75763ed290f93f08c9079cc02d8621d2a352759880c00c6b53c669233
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	mode	development	Low
Vendor	pom	groupid	io.swagger.core.v3	Highest
Vendor	file	name	swagger-models	High
Vendor	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-models	Medium
Vendor	jar	package name	io	Highest
Vendor	pom	parent-artifactid	swagger-project	Low
Vendor	Manifest	automatic-module-name	io.swagger.v3.oas.models	Medium
Vendor	jar	package name	swagger	Highest
Vendor	jar	package name	v3	Highest
Vendor	pom	artifactid	swagger-models	Low
Vendor	pom	name	swagger-models	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-models	Low
Vendor	jar	package name	oas	Highest
Product	Manifest	mode	development	Low
Product	file	name	swagger-models	High
Product	pom	groupid	io.swagger.core.v3	Highest
Product	Manifest	bundle-symbolicname	io.swagger.core.v3.swagger-models	Medium
Product	jar	package name	io	Highest
Product	pom	artifactid	swagger-models	Highest
Product	Manifest	automatic-module-name	io.swagger.v3.oas.models	Medium
Product	pom	parent-artifactid	swagger-project	Medium
Product	jar	package name	swagger	Highest
Product	jar	package name	v3	Highest
Product	pom	name	swagger-models	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	swagger-models	Medium
Product	Manifest	url	https://github.com/swagger-api/swagger-core/modules/swagger-models	Low
Product	jar	package name	oas	Highest
Version	file	version	2.1.1	High
Version	Manifest	implementation-version	2.1.1	High
Version	Manifest	Bundle-Version	2.1.1	High
Version	pom	version	2.1.1	Highest

Identifiers

pkg:maven/io.swagger.core.v3/swagger-models@2.1.1 (Confidence:High)

swagger-ui-3.25.0.jar

Description:

WebJar for Swagger UI

License:

Apache 2.0: https://github.com/swagger-api/swagger-ui

File Path: /home/jenkins/.mvnrepository/org/webjars/swagger-ui/3.25.0/swagger-ui-3.25.0.jar
MD5: 9dad163ba9533c3a7db4f5a867133a03
SHA1: 7b41c520c163d4308f19e5f879e1abaf0a3f03f9
SHA256:e06d0dd86936192c3e0bbc0d461d9adbc75a02b07b2cf9fb8edf5677525aaf7b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	swagger-ui	Low
Vendor	pom	groupid	org.webjars	Highest
Vendor	pom	groupid	webjars	Highest
Vendor	file	name	swagger-ui	High
Vendor	pom	name	Swagger UI	High
Vendor	pom	url	http://webjars.org	Highest
Vendor	Manifest	bundle-symbolicname	org.webjars.swagger-ui	Medium
Product	pom	groupid	webjars	Highest
Product	pom	artifactid	swagger-ui	Highest
Product	Manifest	Bundle-Name	Swagger UI	Medium
Product	file	name	swagger-ui	High
Product	pom	name	Swagger UI	High
Product	pom	url	http://webjars.org	Medium
Product	Manifest	bundle-symbolicname	org.webjars.swagger-ui	Medium
Version	Manifest	Bundle-Version	3.25.0	High
Version	pom	version	3.25.0	Highest
Version	file	version	3.25.0	High

Identifiers

pkg:maven/org.webjars/swagger-ui@3.25.0 (Confidence:High)

tomcat-annotations-api-9.0.50.jar

Description:

Annotations Package

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/tomcat/tomcat-annotations-api/9.0.50/tomcat-annotations-api-9.0.50.jar
MD5: ef2306db94b9d0589bb13b93d7f9b615
SHA1: 5bb3c34b6884bc1e3848238667f5300b9aea7065
SHA256:ffe488bea0ce008d7a995ed157e197cb6f7ac7b3fd18d2bc05d46e5e598a6d0f
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	bundle-symbolicname	org.apache.tomcat-annotations-api	Medium
Vendor	manifest: javax/annotation/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	manifest: javax/annotation/security/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	tomcat-annotations-api	Low
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	manifest: javax/annotation/sql/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	groupid	org.apache.tomcat	Highest
Vendor	pom	groupid	apache.tomcat	Highest
Vendor	file	name	tomcat-annotations-api	High
Vendor	Manifest	provide-capability	osgi.contract;osgi.contract=JavaAnnotation;version:List="1.3,1.2,1.1,1";uses:="javax.annotation,javax.annotation.security,javax.annotation.sql"	Low
Product	manifest: javax/annotation/	Specification-Title	Common Annotations	Medium
Product	manifest: javax/annotation/	Implementation-Title	javax.annotation	Medium
Product	jar	package name	security	Highest
Product	manifest: javax/annotation/security/	Implementation-Title	javax.annotation	Medium
Product	manifest: javax/annotation/security/	Specification-Title	Common Annotations	Medium
Product	pom	groupid	apache.tomcat	Highest
Product	file	name	tomcat-annotations-api	High
Product	Manifest	bundle-symbolicname	org.apache.tomcat-annotations-api	Medium
Product	Manifest	Bundle-Name	tomcat-annotations-api	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	manifest: javax/annotation/sql/	Implementation-Title	javax.annotation	Medium
Product	pom	artifactid	tomcat-annotations-api	Highest
Product	jar	package name	sql	Highest
Product	manifest: javax/annotation/sql/	Specification-Title	Common Annotations	Medium
Product	jar	package name	javax	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Product	Manifest	provide-capability	osgi.contract;osgi.contract=JavaAnnotation;version:List="1.3,1.2,1.1,1";uses:="javax.annotation,javax.annotation.security,javax.annotation.sql"	Low
Product	jar	package name	annotation	Highest
Version	Manifest	Bundle-Version	9.0.50	High
Version	pom	version	9.0.50	Highest
Version	file	version	9.0.50	High

Identifiers

pkg:maven/org.apache.tomcat/tomcat-annotations-api@9.0.50 (Confidence:High)
cpe:2.3:a:www-sql_project:www-sql:9.0.50:*:*:*:*:*:*:* (Confidence:Low)

tomcat-embed-core-9.0.50.jar

Description:

Core Tomcat implementation

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/tomcat/embed/tomcat-embed-core/9.0.50/tomcat-embed-core-9.0.50.jar
MD5: cae13c22f8f3020c495df8a9b57567a5
SHA1: 14307c487516ab3526213a1205c5243b0c484e8d
SHA256:87f00cb38e5df9486c9b1a616a47aba0c1406d218ca96990ca6e41f5e133d238
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	manifest: javax/servlet/resources/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/security/auth/message/config/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	Manifest	bundle-symbolicname	org.apache.tomcat-embed-core	Medium
Vendor	pom	groupid	org.apache.tomcat.embed	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=org.apache.juli.logging.Log)";osgi.serviceloader="org.apache.juli.logging.Log",osgi.contract;osgi.contract=JavaAnnotation;filter:="(&(osgi.contract=JavaAnnotation)(version=1.3.0))",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	manifest: javax/security/auth/message/module/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/security/auth/message/callback/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	jar	package name	core	Highest
Vendor	pom	groupid	apache.tomcat.embed	Highest
Vendor	jar	package name	apache	Highest
Vendor	manifest: javax/security/auth/message/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	manifest: javax/servlet/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	jar	package name	tomcat	Highest
Vendor	manifest: javax/servlet/http/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	Manifest	provide-capability	osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources"	Low
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	manifest: javax/servlet/annotation/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	file	name	tomcat-embed-core	High
Vendor	pom	artifactid	tomcat-embed-core	Low
Vendor	manifest: javax/servlet/descriptor/	Implementation-Vendor	Apache Software Foundation	Medium
Product	jar	package name	java	Highest
Product	manifest: javax/security/auth/message/	Specification-Title	Java Authentication SPI for Containers	Medium
Product	manifest: javax/security/auth/message/config/	Implementation-Title	javax.security.auth.message	Medium
Product	manifest: javax/servlet/descriptor/	Specification-Title	Java API for Servlets	Medium
Product	jar	package name	security	Highest
Product	jar	package name	processor	Highest
Product	manifest: javax/security/auth/message/module/	Specification-Title	Java Authentication SPI for Containers	Medium
Product	Manifest	bundle-symbolicname	org.apache.tomcat-embed-core	Medium
Product	Manifest	Bundle-Name	tomcat-embed-core	Medium
Product	manifest: javax/security/auth/message/config/	Specification-Title	Java Authentication SPI for Containers	Medium
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	manifest: javax/servlet/resources/	Implementation-Title	javax.servlet	Medium
Product	jar	package name	core	Highest
Product	manifest: javax/servlet/annotation/	Specification-Title	Java API for Servlets	Medium
Product	pom	groupid	apache.tomcat.embed	Highest
Product	manifest: javax/servlet/resources/	Specification-Title	Java API for Servlets	Medium
Product	jar	package name	juli	Highest
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	jar	package name	auth	Highest
Product	manifest: javax/servlet/	Specification-Title	Java API for Servlets	Medium
Product	file	name	tomcat-embed-core	High
Product	jar	package name	logging	Highest
Product	manifest: javax/servlet/http/	Implementation-Title	javax.servlet	Medium
Product	manifest: javax/security/auth/message/callback/	Implementation-Title	javax.security.auth.message	Medium
Product	jar	package name	filter	Highest
Product	manifest: javax/servlet/	Implementation-Title	javax.servlet	Medium
Product	manifest: javax/servlet/http/	Specification-Title	Java API for Servlets	Medium
Product	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=org.apache.juli.logging.Log)";osgi.serviceloader="org.apache.juli.logging.Log",osgi.contract;osgi.contract=JavaAnnotation;filter:="(&(osgi.contract=JavaAnnotation)(version=1.3.0))",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	jar	package name	servlet	Highest
Product	jar	package name	apache	Highest
Product	manifest: javax/servlet/annotation/	Implementation-Title	javax.servlet	Medium
Product	jar	package name	http	Highest
Product	jar	package name	tomcat	Highest
Product	manifest: javax/servlet/descriptor/	Implementation-Title	javax.servlet	Medium
Product	jar	package name	servlets	Highest
Product	manifest: javax/security/auth/message/module/	Implementation-Title	javax.security.auth.message	Medium
Product	pom	artifactid	tomcat-embed-core	Highest
Product	Manifest	provide-capability	osgi.contract;osgi.contract=JavaJASPIC;version:List="1.1,1";uses:="javax.security.auth.message,javax.security.auth.message.callback,javax.security.auth.message.config,javax.security.auth.message.module",osgi.contract;osgi.contract=JavaServlet;version:List="4.0,3.1,3,2.5";uses:="javax.servlet,javax.servlet.annotation,javax.servlet.descriptor,javax.servlet.http,javax.servlet.resources"	Low
Product	jar	package name	descriptor	Highest
Product	manifest: javax/security/auth/message/callback/	Specification-Title	Java Authentication SPI for Containers	Medium
Product	jar	package name	message	Highest
Product	manifest: javax/security/auth/message/	Implementation-Title	javax.security.auth.message	Medium
Product	jar	package name	javax	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Product	jar	package name	annotation	Highest
Version	Manifest	Bundle-Version	9.0.50	High
Version	Manifest	Implementation-Version	9.0.50	High
Version	pom	version	9.0.50	Highest
Version	file	version	9.0.50	High

Identifiers

pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.50 (Confidence:High)
cpe:2.3:a:apache:tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache_software_foundation:tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache_tomcat:apache_tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)

tomcat-embed-el-9.0.50.jar

Description:

Core Tomcat implementation

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/tomcat/embed/tomcat-embed-el/9.0.50/tomcat-embed-el-9.0.50.jar
MD5: 13f53c90d491d85be8772c9ae291f428
SHA1: ee4e14e128bf6ffe7650c7a5d8cedf97fb36d91b
SHA256:bc9f0dbec14a856b5982b6be19433deac5107a5b035b32b2252db48108ba31c8
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	pom	groupid	org.apache.tomcat.embed	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	pom	groupid	apache.tomcat.embed	Highest
Vendor	file	name	tomcat-embed-el	High
Vendor	jar	package name	apache	Highest
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	manifest: javax/el/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	pom	artifactid	tomcat-embed-el	Low
Vendor	jar	package name	el	Highest
Vendor	Manifest	provide-capability	osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl"	Low
Vendor	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=javax.el.ExpressionFactory)";osgi.serviceloader="javax.el.ExpressionFactory",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))",osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.registrar)(version>=1.0.0)(!(version>=2.0.0)))"	Low
Vendor	Manifest	bundle-symbolicname	org.apache.tomcat-embed-jasper-el	Medium
Product	Manifest	Bundle-Name	tomcat-embed-jasper-el	Medium
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	pom	groupid	apache.tomcat.embed	Highest
Product	file	name	tomcat-embed-el	High
Product	jar	package name	apache	Highest
Product	manifest: javax/el/	Specification-Title	Expression Language	Medium
Product	manifest: javax/el/	Implementation-Title	javax.el	Medium
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	jar	package name	el	Highest
Product	jar	package name	expressionfactoryimpl	Highest
Product	Manifest	provide-capability	osgi.contract;osgi.contract=JavaEL;version:List="3.0,2.2,2.1";uses:="javax.el",osgi.service;objectClass:List="javax.el.ExpressionFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.el.ExpressionFactory";register:="org.apache.el.ExpressionFactoryImpl"	Low
Product	jar	package name	expressionfactory	Highest
Product	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=javax.el.ExpressionFactory)";osgi.serviceloader="javax.el.ExpressionFactory",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))",osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.registrar)(version>=1.0.0)(!(version>=2.0.0)))"	Low
Product	jar	package name	expression	Highest
Product	Manifest	bundle-symbolicname	org.apache.tomcat-embed-jasper-el	Medium
Product	jar	package name	javax	Highest
Product	pom	url	https://tomcat.apache.org/	Medium
Product	pom	artifactid	tomcat-embed-el	Highest
Version	Manifest	Bundle-Version	9.0.50	High
Version	Manifest	Implementation-Version	9.0.50	High
Version	pom	version	9.0.50	Highest
Version	file	version	9.0.50	High

Identifiers

pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@9.0.50 (Confidence:High)

tomcat-embed-websocket-9.0.50.jar

Description:

Core Tomcat implementation

License:

Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/apache/tomcat/embed/tomcat-embed-websocket/9.0.50/tomcat-embed-websocket-9.0.50.jar
MD5: 10593d26bf2d9f35abf8fe32380ed276
SHA1: eb8d0bedeb2a9ed61ea3b3790055e937e52898a3
SHA256:f1b0f015eadd0dee42e33fa8e9080dbf52e535187c4bc30bf73032ff381f5220
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	Implementation-Vendor	Apache Software Foundation	High
Vendor	manifest: javax/websocket/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=javax.websocket.ContainerProvider)";osgi.serviceloader="javax.websocket.ContainerProvider",osgi.serviceloader;filter:="(osgi.serviceloader=javax.websocket.server.ServerEndpointConfig$Configurator)";osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))",osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.registrar)(version>=1.0.0)(!(version>=2.0.0)))",osgi.contract;osgi.contract=JavaServlet;filter:="(&(osgi.contract=JavaServlet)(version=4.0.0))"	Low
Vendor	pom	groupid	org.apache.tomcat.embed	Highest
Vendor	pom	url	https://tomcat.apache.org/	Highest
Vendor	pom	groupid	apache.tomcat.embed	Highest
Vendor	jar	package name	apache	Highest
Vendor	jar	package name	tomcat	Highest
Vendor	manifest: javax/websocket/server/	Implementation-Vendor	Apache Software Foundation	Medium
Vendor	Manifest	provide-capability	osgi.contract;osgi.contract=JavaWebSockets;version:List="1.1,1";uses:="javax.websocket,javax.websocket.server",osgi.service;objectClass:List="javax.websocket.ContainerProvider";effective:=active,osgi.service;objectClass:List="javax.websocket.server.ServerEndpointConfig$Configurator";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.websocket.ContainerProvider";register:="org.apache.tomcat.websocket.WsContainerProvider",osgi.serviceloader;osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator";register:="org.apache.tomcat.websocket.server.DefaultServerEndpointConfigurator"	Low
Vendor	Manifest	specification-vendor	Apache Software Foundation	Low
Vendor	jar	package name	websocket	Highest
Vendor	pom	artifactid	tomcat-embed-websocket	Low
Vendor	file	name	tomcat-embed-websocket	High
Vendor	Manifest	bundle-symbolicname	org.apache.tomcat-embed-websocket	Medium
Product	manifest: javax/websocket/server/	Specification-Title	WebSocket	Medium
Product	jar	package name	server	Highest
Product	jar	package name	serverendpointconfig$configurator	Highest
Product	jar	package name	serverendpointconfig	Highest
Product	Manifest	require-capability	osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.processor)(version>=1.0.0)(!(version>=2.0.0)))",osgi.serviceloader;filter:="(osgi.serviceloader=javax.websocket.ContainerProvider)";osgi.serviceloader="javax.websocket.ContainerProvider",osgi.serviceloader;filter:="(osgi.serviceloader=javax.websocket.server.ServerEndpointConfig$Configurator)";osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator",osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))",osgi.extender;filter:="(&(osgi.extender=osgi.serviceloader.registrar)(version>=1.0.0)(!(version>=2.0.0)))",osgi.contract;osgi.contract=JavaServlet;filter:="(&(osgi.contract=JavaServlet)(version=4.0.0))"	Low
Product	Manifest	Implementation-Title	Apache Tomcat	High
Product	manifest: javax/websocket/server/	Implementation-Title	javax.websocket	Medium
Product	pom	artifactid	tomcat-embed-websocket	Highest
Product	Manifest	Bundle-Name	tomcat-embed-websocket	Medium
Product	jar	package name	containerprovider	Highest
Product	pom	groupid	apache.tomcat.embed	Highest
Product	jar	package name	apache	Highest
Product	jar	package name	tomcat	Highest
Product	Manifest	specification-title	Apache Tomcat	Medium
Product	manifest: javax/websocket/	Specification-Title	WebSocket	Medium
Product	Manifest	provide-capability	osgi.contract;osgi.contract=JavaWebSockets;version:List="1.1,1";uses:="javax.websocket,javax.websocket.server",osgi.service;objectClass:List="javax.websocket.ContainerProvider";effective:=active,osgi.service;objectClass:List="javax.websocket.server.ServerEndpointConfig$Configurator";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.websocket.ContainerProvider";register:="org.apache.tomcat.websocket.WsContainerProvider",osgi.serviceloader;osgi.serviceloader="javax.websocket.server.ServerEndpointConfig$Configurator";register:="org.apache.tomcat.websocket.server.DefaultServerEndpointConfigurator"	Low
Product	jar	package name	websocket	Highest
Product	jar	package name	wscontainerprovider	Highest
Product	file	name	tomcat-embed-websocket	High
Product	Manifest	bundle-symbolicname	org.apache.tomcat-embed-websocket	Medium
Product	jar	package name	javax	Highest
Product	manifest: javax/websocket/	Implementation-Title	javax.websocket	Medium
Product	pom	url	https://tomcat.apache.org/	Medium
Version	Manifest	Bundle-Version	9.0.50	High
Version	Manifest	Implementation-Version	9.0.50	High
Version	pom	version	9.0.50	Highest
Version	file	version	9.0.50	High

Identifiers

pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.50 (Confidence:High)
cpe:2.3:a:apache:tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache_software_foundation:tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:apache_tomcat:apache_tomcat:9.0.50:*:*:*:*:*:*:* (Confidence:Highest)

txw2-2.3.4.jar

Description:

        TXW is a library that allows you to write XML documents.

File Path: /home/jenkins/.mvnrepository/org/glassfish/jaxb/txw2/2.3.4/txw2-2.3.4.jar
MD5: 0d2de5cab75137d954fe38fb6d10471b
SHA1: 257fa649d3137a1060d222aefb96b7d1dd5f1286
SHA256:32c0c524624bd535d4e40b30afa2def7399cbb824fb3e74c73aea62872ad753b
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar (hint)	package name	oracle	Highest
Vendor	Manifest	Implementation-Vendor-Id	org.eclipse	Medium
Vendor	jar	package name	txw2	Highest
Vendor	jar	package name	txw	Highest
Vendor	Manifest	Implementation-Vendor	Eclipse Foundation	High
Vendor	pom	artifactid	txw2	Low
Vendor	pom	groupid	org.glassfish.jaxb	Highest
Vendor	pom	parent-artifactid	jaxb-txw-parent	Low
Vendor	Manifest	git-revision	2a16b4e	Low
Vendor	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Vendor	jar	package name	sun	Highest
Vendor	pom	name	TXW2 Runtime	High
Vendor	file	name	txw2	High
Vendor	jar	package name	xml	Highest
Vendor	pom	groupid	glassfish.jaxb	Highest
Product	pom	parent-artifactid	jaxb-txw-parent	Medium
Product	Manifest	specification-title	Jakarta XML Binding	Medium
Product	jar	package name	txw2	Highest
Product	jar	package name	txw	Highest
Product	Manifest	Implementation-Title	Jakarta XML Binding Implementation	High
Product	Manifest	git-revision	2a16b4e	Low
Product	pom	parent-groupid	com.sun.xml.bind.mvn	Medium
Product	pom	artifactid	txw2	Highest
Product	jar	package name	sun	Highest
Product	pom	name	TXW2 Runtime	High
Product	file	name	txw2	High
Product	jar	package name	xml	Highest
Product	pom	groupid	glassfish.jaxb	Highest
Version	file	version	2.3.4	High
Version	pom	version	2.3.4	Highest
Version	Manifest	Implementation-Version	2.3.4	High
Version	Manifest	build-id	2.3.4	Medium
Version	Manifest	major-version	2.3.4	Medium

Identifiers

pkg:maven/org.glassfish.jaxb/txw2@2.3.4 (Confidence:High)

ucp-19.3.0.0.jar

Description:

Oracle Universal Connection Pool (UCP)

License:

Oracle Free Use Terms and Conditions (FUTC)

File Path: /home/jenkins/.mvnrepository/com/oracle/ojdbc/ucp/19.3.0.0/ucp-19.3.0.0.jar
MD5: 9845d08450b16c7ae81da60689d27f3c
SHA1: 796b661b0bb1818b7c04171837356acddcea504c
SHA256:23d8debe40a764df74d5eda7e8c1ce9b2c190a34f739ca4d751eaa94114d31cc
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	ucp	High
Vendor	Manifest	build-info	190404	Low
Vendor	pom	name	ucp	High
Vendor	jar (hint)	package name	sun	Highest
Vendor	Manifest	Implementation-Vendor	Oracle Corporation	High
Vendor	pom	groupid	oracle.ojdbc	Highest
Vendor	jar	package name	oracle	Highest
Vendor	pom	groupid	com.oracle.ojdbc	Highest
Vendor	jar	package name	ucp	Highest
Vendor	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Highest
Vendor	pom	artifactid	ucp	Low
Product	file	name	ucp	High
Product	Manifest	build-info	190404	Low
Product	pom	name	ucp	High
Product	pom	url	https://www.oracle.com/database/technologies/appdev/jdbc.html	Medium
Product	pom	artifactid	ucp	Highest
Product	pom	groupid	oracle.ojdbc	Highest
Product	jar	package name	oracle	Highest
Product	jar	package name	ucp	Highest
Product	Manifest	Implementation-Title	Oracle Universal Connection Pool	High
Version	file	version	19.3.0.0	High
Version	pom	version	19.3.0.0	Highest

Identifiers

pkg:maven/com.oracle.ojdbc/ucp@19.3.0.0 (Confidence:High)
cpe:2.3:a:oracle:oracle_database:19.3.0.0:*:*:*:*:*:*:* (Confidence:Low)

validation-api-2.0.1.Final.jar

Description:

        Bean Validation API

License:

Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/javax/validation/validation-api/2.0.1.Final/validation-api-2.0.1.Final.jar
MD5: 5d02c034034a7a16725ceff787e191d6
SHA1: cb855558e6271b1b32e716d24cb85c7f583ce09e
SHA256:9873b46df1833c9ee8f5bc1ff6853375115dadd8897bcb5a0dffb5848835ee6c
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	groupid	javax.validation	Highest
Vendor	file	name	validation-api	High
Vendor	Manifest	automatic-module-name	java.validation	Medium
Vendor	pom	name	Bean Validation API	High
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	Manifest	bundle-symbolicname	javax.validation.api	Medium
Vendor	pom	url	http://beanvalidation.org	Highest
Vendor	pom	artifactid	validation-api	Low
Vendor	jar	package name	validation	Highest
Vendor	jar	package name	javax	Highest
Product	pom	groupid	javax.validation	Highest
Product	file	name	validation-api	High
Product	pom	url	http://beanvalidation.org	Medium
Product	Manifest	Bundle-Name	Bean Validation API	Medium
Product	Manifest	automatic-module-name	java.validation	Medium
Product	pom	name	Bean Validation API	High
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	bundle-symbolicname	javax.validation.api	Medium
Product	pom	artifactid	validation-api	Highest
Product	jar	package name	validation	Highest
Product	jar	package name	javax	Highest
Version	Manifest	Bundle-Version	2.0.1.Final	High
Version	pom	version	2.0.1.Final	Highest

Identifiers

pkg:maven/javax.validation/validation-api@2.0.1.Final (Confidence:High)

waffle-jna-1.9.1.jar

Description:

WAFFLE JNA implementation

File Path: /home/jenkins/.mvnrepository/com/github/waffle/waffle-jna/1.9.1/waffle-jna-1.9.1.jar
MD5: dad462f82a87162d867f1920c1e88ac8
SHA1: da610d1564ab9e4993ffa5e1e0c407027fede00d
SHA256:5dfeb0acbe917b90af65705c614243b84d4b1b9d92858eeaeafa8885fca0f88e
Referenced In Project/Scope:Entando Component Manager:runtime

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	copyright	2018	Low
Vendor	pom	name	waffle-jna	High
Vendor	Manifest	Implementation-Vendor-Id	com.github.waffle	Medium
Vendor	pom	url	https://waffle.github.com/waffle/	Highest
Vendor	Manifest	implementation-url	https://waffle.github.com/waffle/	Low
Vendor	pom	groupid	github.waffle	Highest
Vendor	Manifest	Implementation-Vendor	com.github.waffle	High
Vendor	Manifest	build-time	2018-07-02 00:54:43	Low
Vendor	pom	parent-groupid	com.github.waffle	Medium
Vendor	pom	artifactid	waffle-jna	Low
Vendor	Manifest	specification-vendor	com.github.waffle	Low
Vendor	pom	groupid	com.github.waffle	Highest
Vendor	jar	package name	waffle	Highest
Vendor	file	name	waffle-jna	High
Vendor	Manifest	git-revision		Low
Vendor	Manifest	os-arch	amd64	Low
Vendor	jar	package name	windows	Highest
Vendor	pom	parent-artifactid	waffle-parent	Low
Vendor	Manifest	os-name	Windows 10	Medium
Product	Manifest	copyright	2018	Low
Product	pom	url	https://waffle.github.com/waffle/	Medium
Product	pom	artifactid	waffle-jna	Highest
Product	pom	name	waffle-jna	High
Product	Manifest	implementation-url	https://waffle.github.com/waffle/	Low
Product	pom	groupid	github.waffle	Highest
Product	Manifest	build-time	2018-07-02 00:54:43	Low
Product	pom	parent-groupid	com.github.waffle	Medium
Product	Manifest	specification-title	waffle-jna	Medium
Product	jar	package name	waffle	Highest
Product	Manifest	Implementation-Title	waffle-jna	High
Product	file	name	waffle-jna	High
Product	Manifest	git-revision		Low
Product	Manifest	os-arch	amd64	Low
Product	jar	package name	windows	Highest
Product	pom	parent-artifactid	waffle-parent	Medium
Product	Manifest	os-name	Windows 10	Medium
Version	file	version	1.9.1	High
Version	Manifest	Implementation-Version	1.9.1	High
Version	pom	version	1.9.1	Highest

Identifiers

pkg:maven/com.github.waffle/waffle-jna@1.9.1 (Confidence:High)

webjars-locator-0.38.jar

Description:

WebJar Locator

License:

MIT: https://github.com/webjars/webjars-locator/blob/master/LICENSE.md

File Path: /home/jenkins/.mvnrepository/org/webjars/webjars-locator/0.38/webjars-locator-0.38.jar
MD5: ccb0179a7a0db487bdcc811a86faa421
SHA1: d27083737381eadbd11b3f94dbd207149b1a7dd3
SHA256:aa62e73553cd87d9894c13bd8010c8c078af03c68723bbda51cddc38eb72f3ff
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	webjars-locator	High
Vendor	pom	groupid	org.webjars	Highest
Vendor	pom	groupid	webjars	Highest
Vendor	pom	artifactid	webjars-locator	Low
Vendor	pom	name	webjars-locator	High
Vendor	jar	package name	webjars	Low
Vendor	jar	package name	webjars	Highest
Vendor	pom	url	http://webjars.org	Highest
Product	file	name	webjars-locator	High
Product	pom	groupid	webjars	Highest
Product	pom	name	webjars-locator	High
Product	jar	package name	webjars	Highest
Product	pom	url	http://webjars.org	Medium
Product	pom	artifactid	webjars-locator	Highest
Version	file	version	0.38	High
Version	pom	version	0.38	Highest

Identifiers

pkg:maven/org.webjars/webjars-locator@0.38 (Confidence:High)

webjars-locator-core-0.46.jar

Description:

WebJar Locator Core functionality

License:

MIT: https://github.com/webjars/webjars-locator-core/blob/master/LICENSE.md

File Path: /home/jenkins/.mvnrepository/org/webjars/webjars-locator-core/0.46/webjars-locator-core-0.46.jar
MD5: 467243ddcdf07d23e2bd040ae096d61f
SHA1: 2c207eae0bf475d6e2444ece594c199f1f418322
SHA256:2295de3f8b84fd2f55aca565a97213e826f8bbad1ca8b16a8c75aa98f7a20110
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	name	webjars-locator-core	High
Vendor	pom	groupid	org.webjars	Highest
Vendor	pom	groupid	webjars	Highest
Vendor	jar	package name	webjars	Low
Vendor	jar	package name	webjars	Highest
Vendor	pom	artifactid	webjars-locator-core	Low
Vendor	pom	url	http://webjars.org	Highest
Vendor	file	name	webjars-locator-core	High
Product	pom	name	webjars-locator-core	High
Product	pom	groupid	webjars	Highest
Product	jar	package name	webjars	Highest
Product	pom	url	http://webjars.org	Medium
Product	pom	artifactid	webjars-locator-core	Highest
Product	file	name	webjars-locator-core	High
Version	pom	version	0.46	Highest
Version	file	version	0.46	High

Identifiers

pkg:maven/org.webjars/webjars-locator-core@0.46 (Confidence:High)

zjsonpatch-0.3.0.jar

Description:

Java Library to find / apply JSON Patches according to RFC 6902

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/io/fabric8/zjsonpatch/0.3.0/zjsonpatch-0.3.0.jar
MD5: c47f98189f594bd86ccbf40c5391b600
SHA1: d3ebf0f291297649b4c8dc3ecc81d2eddedc100d
SHA256:ae4e5e931646a25cb09b55186de4f3346e358e01130bef279ddf495a719c71d5
Referenced In Project/Scope:Entando Component Manager:compile

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	zjsonpatch	High
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	jar	package name	zjsonpatch	Highest
Vendor	Manifest	bundle-symbolicname	io.fabric8.zjsonpatch	Medium
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Vendor	jar	package name	fabric8	Highest
Vendor	Manifest	implementation-url	https://github.com/fabric8io/zjsonpatch/	Low
Vendor	Manifest	os-name	Linux	Medium
Vendor	pom	url	fabric8io/zjsonpatch/	Highest
Vendor	pom	name	zjsonpatch	High
Vendor	Manifest	build-timestamp	${build.datetime}	Low
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	Manifest	os-arch	amd64	Low
Vendor	pom	artifactid	zjsonpatch	Low
Vendor	Manifest	Implementation-Vendor-Id	io.fabric8	Medium
Product	Manifest	Implementation-Title	zjsonpatch	High
Product	file	name	zjsonpatch	High
Product	jar	package name	io	Highest
Product	pom	groupid	io.fabric8	Highest
Product	jar	package name	zjsonpatch	Highest
Product	Manifest	Bundle-Name	zjsonpatch	Medium
Product	Manifest	bundle-symbolicname	io.fabric8.zjsonpatch	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.7))"	Low
Product	jar	package name	fabric8	Highest
Product	Manifest	implementation-url	https://github.com/fabric8io/zjsonpatch/	Low
Product	Manifest	os-name	Linux	Medium
Product	pom	url	fabric8io/zjsonpatch/	High
Product	pom	name	zjsonpatch	High
Product	pom	artifactid	zjsonpatch	Highest
Product	Manifest	build-timestamp	${build.datetime}	Low
Product	Manifest	os-arch	amd64	Low
Product	Manifest	specification-title	zjsonpatch	Medium
Version	pom	version	0.3.0	Highest
Version	file	version	0.3.0	High
Version	Manifest	Implementation-Version	0.3.0	High
Version	Manifest	Bundle-Version	0.3.0	High

Identifiers

pkg:maven/io.fabric8/zjsonpatch@0.3.0 (Confidence:High)
cpe:2.3:a:oracle:java_se:0.3.0:*:*:*:*:*:*:* (Confidence:Low)

Suppressed Vulnerabilities

entando-k8s-custom-model-6.3.1.jar

Description:

Entando's Kubernetes Custom Resources

License:

GNU LESSER GENERAL PUBLIC LICENSE, Version 2.1, February 1999: https://www.gnu.org/licenses/lgpl-2.1.txt

File Path: /home/jenkins/.mvnrepository/org/entando/entando-k8s-custom-model/6.3.1/entando-k8s-custom-model-6.3.1.jar
MD5: 41152d435f84b9ff6f2639d99df6ff42
SHA1: bb0fb8aae46493f32c83f49b5debc357e9bacaf7
SHA256: 1f4c30a803f72b9428696605c48cb8e5b67e72046c2e7e4b4d22c476b7c4c624

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	entando	Highest
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Entando Inc.	High
Vendor	pom	groupid	org.entando	Highest
Vendor	pom	organization name	Entando Inc.	High
Vendor	Manifest	build-jdk-spec	11	Low
Vendor	pom	groupid	entando	Highest
Vendor	pom	parent-artifactid	entando-quarkus-parent	Low
Vendor	pom	artifactid	entando-k8s-custom-model	Low
Vendor	pom	parent-groupid	org.entando	Medium
Vendor	jar	package name	model	Highest
Vendor	pom	name	Entando Kubernetes Custom Model	High
Vendor	pom	organization url	http://www.entando.com/	Medium
Vendor	Manifest	implementation-build	6.3.1	Low
Vendor	file	name	entando-k8s-custom-model	High
Vendor	pom	url	https://central.entando.com	Highest
Product	Manifest	Implementation-Title	Entando Kubernetes Custom Model	High
Product	jar	package name	entando	Highest
Product	jar	package name	kubernetes	Highest
Product	pom	organization url	http://www.entando.com/	Low
Product	pom	url	https://central.entando.com	Medium
Product	Manifest	build-jdk-spec	11	Low
Product	pom	groupid	entando	Highest
Product	pom	artifactid	entando-k8s-custom-model	Highest
Product	pom	parent-groupid	org.entando	Medium
Product	jar	package name	model	Highest
Product	pom	name	Entando Kubernetes Custom Model	High
Product	pom	parent-artifactid	entando-quarkus-parent	Medium
Product	Manifest	implementation-build	6.3.1	Low
Product	file	name	entando-k8s-custom-model	High
Product	pom	organization name	Entando Inc.	Low
Version	file	version	6.3.1	High
Version	pom	parent-version	6.3.1	Low
Version	Manifest	Implementation-Version	6.3.1	High
Version	Manifest	implementation-build	6.3.1	Low
Version	pom	version	6.3.1	Highest

Suppressed Identifiers

cpe:2.3:a:kubernetes:kubernetes:6.3.1:*:*:*:*:*:*:* suppressed (Confidence:Low)
- Notes: A whole lot of false positives based on K8S's internals that have nothing to do with our CRDs

Suppressed Vulnerabilities

CVE-2020-8554 suppressed

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.

CWE-863 Incorrect Authorization

CVSSv2:

Base Score: MEDIUM (6.0)
Vector: /AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSSv3:

MEDIUM (5.0)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

References:

Vulnerable Software & Versions:

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

kubernetes-client-4.7.0.jar

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-client/4.7.0/kubernetes-client-4.7.0.jar
MD5: 1d356d064e8186b15903298b43e6be1d
SHA1: 12547e58b775e415157315048224be39e3944afa
SHA256: b30d0b9908d4e3f9f6a050d05e568de892f9616de4fecdac131fde3e246bf3c7

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	artifactid	kubernetes-client	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	file	name	kubernetes-client	High
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Fabric8 :: Kubernetes :: Java Client	High
Vendor	jar	package name	client	Highest
Vendor	pom	parent-artifactid	kubernetes-client-project	Low
Vendor	jar	package name	fabric8	Highest
Product	pom	artifactid	kubernetes-client	Highest
Product	jar	package name	kubernetes	Highest
Product	pom	parent-artifactid	kubernetes-client-project	Medium
Product	jar	package name	io	Highest
Product	pom	groupid	io.fabric8	Highest
Product	file	name	kubernetes-client	High
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	name	Fabric8 :: Kubernetes :: Java Client	High
Product	jar	package name	client	Highest
Product	jar	package name	fabric8	Highest
Version	file	version	4.7.0	High
Version	pom	version	4.7.0	Highest

Suppressed Identifiers

cpe:2.3:a:kubernetes:kubernetes:4.7.0:*:*:*:*:*:*:* suppressed (Confidence:Highest)
- Notes: A whole lot of false positives based on K8S's internals that have nothing to do with our CRDs

Suppressed Vulnerabilities

CVE-2020-8554 suppressed

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.

CWE-863 Incorrect Authorization

CVSSv2:

Base Score: MEDIUM (6.0)
Vector: /AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSSv3:

MEDIUM (5.0)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

References:

Vulnerable Software & Versions:

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

CVE-2020-8570 suppressed

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Notes: A whole lot of false positives based on K8S's internals that have nothing to do with our CRDs

CVSSv2:

Base Score: MEDIUM (6.4)
Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSSv3:

HIGH (7.5)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References:

Vulnerable Software & Versions: (show all)

kubernetes-model-4.7.0.jar

Description:

Java client for Kubernetes and OpenShift

License:

http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-model/4.7.0/kubernetes-model-4.7.0.jar
MD5: 87609db8395ebd5136763394a11eb8fc
SHA1: cf4831621a7f61deb5e87c9390ef7b970f16d909
SHA256: 1ecfcd2bfd4ddfe457723af295ef5ec7231f02aafb9c8799fa7fb73d446411fe

Evidence

Type	Source	Name	Value	Confidence
Vendor	pom	parent-artifactid	kubernetes-model-generator	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Red Hat	High
Vendor	file	name	kubernetes-model	High
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	Manifest	bundle-docurl	http://redhat.com	Low
Vendor	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model/	Low
Vendor	jar	package name	fabric8	Highest
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	Red Hat	Low
Vendor	pom	artifactid	kubernetes-model	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Vendor	pom	name	Fabric8 :: Kubernetes Model	High
Vendor	Manifest	build-timestamp	${build.datetime}	Low
Vendor	Manifest	bundle-symbolicname	io.fabric8.kubernetes-model	Medium
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	Implementation-Vendor-Id	io.fabric8	Medium
Product	jar	package name	openshift	Highest
Product	jar	package name	kubernetes	Highest
Product	file	name	kubernetes-model	High
Product	jar	package name	io	Highest
Product	Manifest	bundle-docurl	http://redhat.com	Low
Product	pom	groupid	io.fabric8	Highest
Product	pom	parent-artifactid	kubernetes-model-generator	Medium
Product	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model/	Low
Product	Manifest	Implementation-Title	Fabric8 :: Kubernetes Model	High
Product	jar	package name	fabric8	Highest
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	Fabric8 :: Kubernetes Model	Medium
Product	pom	artifactid	kubernetes-model	Highest
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.8))"	Low
Product	Manifest	Bundle-Name	Fabric8 :: Kubernetes Model	Medium
Product	pom	name	Fabric8 :: Kubernetes Model	High
Product	Manifest	build-timestamp	${build.datetime}	Low
Product	Manifest	bundle-symbolicname	io.fabric8.kubernetes-model	Medium
Product	Manifest	os-arch	amd64	Low
Version	file	version	4.7.0	High
Version	Manifest	Bundle-Version	4.7.0	High
Version	Manifest	Implementation-Version	4.7.0	High
Version	pom	version	4.7.0	Highest

Suppressed Identifiers

None

Suppressed Vulnerabilities

CVE-2020-8570 suppressed

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process executing the client code.

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Notes: A whole lot of false positives based on K8S's internals that have nothing to do with our CRDs

CVSSv2:

Base Score: MEDIUM (6.4)
Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:P

CVSSv3:

HIGH (7.5)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References:

Vulnerable Software & Versions: (show all)

kubernetes-model-common-4.7.0.jar

File Path: /home/jenkins/.mvnrepository/io/fabric8/kubernetes-model-common/4.7.0/kubernetes-model-common-4.7.0.jar
MD5: 1845c2fd17622c1f9980ddbf3183e84e
SHA1: 38e88a4bdf0d4a77089927494aa60358b8b66455
SHA256: b5bdb86d95feba870016a67304f822a26112db7c30eb4bc656ef502a44a660f3

Evidence

Type	Source	Name	Value	Confidence
Vendor	Manifest	build-timestamp	Wed, 8 Jan 2020 13:20:45 +0000	Low
Vendor	pom	parent-artifactid	kubernetes-model-generator	Low
Vendor	pom	artifactid	kubernetes-model-common	Low
Vendor	jar	package name	kubernetes	Highest
Vendor	Manifest	Implementation-Vendor	Red Hat	High
Vendor	jar	package name	io	Highest
Vendor	pom	groupid	io.fabric8	Highest
Vendor	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model-common/	Low
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	pom	name	Fabric8 :: Kubernetes Model :: Common	High
Vendor	jar	package name	fabric8	Highest
Vendor	Manifest	os-name	Linux	Medium
Vendor	Manifest	specification-vendor	Red Hat	Low
Vendor	jar	package name	model	Highest
Vendor	Manifest	os-arch	amd64	Low
Vendor	Manifest	java-vendor	Oracle Corporation	Medium
Vendor	file	name	kubernetes-model-common	High
Product	Manifest	build-timestamp	Wed, 8 Jan 2020 13:20:45 +0000	Low
Product	pom	artifactid	kubernetes-model-common	Highest
Product	jar	package name	kubernetes	Highest
Product	jar	package name	io	Highest
Product	Manifest	implementation-url	http://fabric8.io/kubernetes-model-generator/kubernetes-model-common/	Low
Product	pom	groupid	io.fabric8	Highest
Product	Manifest	build-jdk-spec	1.8	Low
Product	pom	parent-artifactid	kubernetes-model-generator	Medium
Product	pom	name	Fabric8 :: Kubernetes Model :: Common	High
Product	jar	package name	fabric8	Highest
Product	Manifest	os-name	Linux	Medium
Product	Manifest	specification-title	Fabric8 :: Kubernetes Model :: Common	Medium
Product	Manifest	Implementation-Title	Fabric8 :: Kubernetes Model :: Common	High
Product	jar	package name	model	Highest
Product	Manifest	os-arch	amd64	Low
Product	file	name	kubernetes-model-common	High
Version	file	version	4.7.0	High
Version	Manifest	Implementation-Version	4.7.0	High
Version	pom	version	4.7.0	Highest

Suppressed Identifiers

cpe:2.3:a:kubernetes:kubernetes:4.7.0:*:*:*:*:*:*:* suppressed (Confidence:Highest)
- Notes: A whole lot of false positives based on K8S's internals that have nothing to do with our CRDs

Suppressed Vulnerabilities

CVE-2020-8554 suppressed

Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.

CWE-863 Incorrect Authorization

CVSSv2:

Base Score: MEDIUM (6.0)
Vector: /AV:N/AC:M/Au:S/C:P/I:P/A:P

CVSSv3:

MEDIUM (5.0)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

References:

Vulnerable Software & Versions:

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

lang-tag-1.5.jar

Description:

Java implementation of "Tags for Identifying Languages" (RFC 5646).

License:

The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/com/nimbusds/lang-tag/1.5/lang-tag-1.5.jar
MD5: ac21831d870da5d2d7be17711aa3229b
SHA1: 7e82e3c4c593f85addf4bd209abde4f8ff933a07
SHA256: 761c5b2bf99cd8c611badf013e79435fd571c4464d9d7243b78d70ba955743c9

Evidence

Type	Source	Name	Value	Confidence
Vendor	file	name	lang-tag	High
Vendor	Manifest	bundle-symbolicname	lang-tag	Medium
Vendor	Manifest	specification-vendor	Connect2id Ltd.	Low
Vendor	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Vendor	Manifest	build-number	${buildNumber}	Low
Vendor	Manifest	Implementation-Vendor-Id	com.nimbusds	Medium
Vendor	pom	organization url	https://connect2id.com/	Medium
Vendor	Manifest	build-tag	1.5	Low
Vendor	pom	groupid	com.nimbusds	Highest
Vendor	Manifest	build-jdk-spec	1.8	Low
Vendor	jar	package name	nimbusds	Highest
Vendor	pom	name	Nimbus LangTag	High
Vendor	Manifest	Implementation-Vendor	Connect2id Ltd.	High
Vendor	Manifest	build-date	${timestamp}	Low
Vendor	Manifest	bundle-docurl	https://connect2id.com/	Low
Vendor	pom	artifactid	lang-tag	Low
Vendor	pom	groupid	nimbusds	Highest
Vendor	jar	package name	langtag	Highest
Vendor	pom	url	https://bitbucket.org/connect2id/nimbus-language-tags	Highest
Vendor	pom	organization name	Connect2id Ltd.	High
Product	file	name	lang-tag	High
Product	Manifest	bundle-symbolicname	lang-tag	Medium
Product	Manifest	require-capability	osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=1.6))"	Low
Product	Manifest	build-number	${buildNumber}	Low
Product	pom	url	https://bitbucket.org/connect2id/nimbus-language-tags	Medium
Product	Manifest	build-tag	1.5	Low
Product	Manifest	Bundle-Name	Nimbus LangTag	Medium
Product	Manifest	build-jdk-spec	1.8	Low
Product	jar	package name	nimbusds	Highest
Product	pom	organization name	Connect2id Ltd.	Low
Product	pom	name	Nimbus LangTag	High
Product	Manifest	Implementation-Title	Nimbus LangTag	High
Product	pom	artifactid	lang-tag	Highest
Product	Manifest	build-date	${timestamp}	Low
Product	Manifest	bundle-docurl	https://connect2id.com/	Low
Product	pom	organization url	https://connect2id.com/	Low
Product	Manifest	specification-title	Nimbus LangTag	Medium
Product	pom	groupid	nimbusds	Highest
Product	jar	package name	langtag	Highest
Version	Manifest	Implementation-Version	1.5	High
Version	Manifest	build-tag	1.5	Low
Version	pom	version	1.5	Highest
Version	file	version	1.5	High

Suppressed Identifiers

None

Suppressed Vulnerabilities

CVE-2020-23171 suppressed

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

CWE-610 Externally Controlled Reference to a Resource in Another Sphere

Notes: --> nothing new available

CVSSv2:

Base Score: MEDIUM (4.3)
Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSSv3:

MEDIUM (5.5)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

References:

MISC - https://github.com/nim-lang/zip/issues/54

Vulnerable Software & Versions:

cpe:2.3:a:nim-lang:nim-lang:*:*:*:*:*:*:*:*

spring-security-jwt-1.1.1.RELEASE.jar

Description:

Spring Security JWT is a small utility library for encoding and decoding JSON Web Tokens.
	It belongs to the family of Spring Security crypto libraries that handle encoding and decoding text as
	a general, useful thing to be able to do.

License:

Apache 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.mvnrepository/org/springframework/security/spring-security-jwt/1.1.1.RELEASE/spring-security-jwt-1.1.1.RELEASE.jar
MD5: 703d7744e66813c46202efbbf645ac8e
SHA1: 32a64cdbe06b8aa8fe98e59689cf0c377725868b
SHA256: acc5a1e0eeeffde0d7b8a18cdbe3245915e00203f90e98db7f3b7dbdeea75e5a

Evidence

Type	Source	Name	Value	Confidence
Vendor	jar	package name	security	Highest
Vendor	hint analyzer	vendor	vmware	Highest
Vendor	pom	name	Spring Security JWT Library	High
Vendor	pom	groupid	springframework.security	Highest
Vendor	hint analyzer	vendor	pivotal software	Highest
Vendor	jar	package name	jwt	Highest
Vendor	pom	organization url	https://www.springsource.com	Medium
Vendor	hint analyzer	vendor	SpringSource	Highest
Vendor	pom	groupid	org.springframework.security	Highest
Vendor	pom	artifactid	spring-security-jwt	Low
Vendor	pom	url	spring-projects/spring-security-oauth	Highest
Vendor	pom	organization name	SpringSource	High
Vendor	jar	package name	crypto	Highest
Vendor	jar	package name	springframework	Highest
Vendor	jar	package name	security	Low
Vendor	file	name	spring-security-jwt	High
Vendor	jar	package name	springframework	Low
Vendor	jar	package name	jwt	Low
Product	jar	package name	security	Highest
Product	pom	organization name	SpringSource	Low
Product	pom	name	Spring Security JWT Library	High
Product	pom	artifactid	spring-security-jwt	Highest
Product	pom	url	spring-projects/spring-security-oauth	High
Product	pom	groupid	springframework.security	Highest
Product	jar	package name	jwt	Highest
Product	pom	organization url	https://www.springsource.com	Low
Product	jar	package name	crypto	Highest
Product	jar	package name	springframework	Highest
Product	jar	package name	security	Low
Product	file	name	spring-security-jwt	High
Product	jar	package name	jwt	Low
Version	pom	version	1.1.1.RELEASE	Highest

Suppressed Identifiers

None

Suppressed Vulnerabilities

CVE-2021-22112 suppressed

Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application.

NVD-CWE-noinfo

Notes: --> spring-security-jwt*@1.1.1.RELEASE

CVSSv2:

Base Score: HIGH (9.0)
Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSSv3:

HIGH (8.8)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References:

Vulnerable Software & Versions: (show all)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: Entando Component Manager

org.entando:entando-component-manager:6.3.36

Summary

Dependencies

HdrHistogram-2.1.12.jar

Evidence

Identifiers

HikariCP-4.0.3.jar

Evidence

Identifiers

LatencyUtils-2.0.3.jar

Evidence

Identifiers

accessors-smart-2.4.7.jar

Evidence

Identifiers

antlr-2.7.7.jar

Evidence

Identifiers

apiguardian-api-1.1.0.jar

Evidence

Identifiers

asm-9.1.jar

Evidence

Identifiers

aspectjweaver-1.9.7.jar

Evidence

Identifiers

automaton-1.11-8.jar

Evidence

Identifiers

awaitility-4.0.1.jar

Evidence

Identifiers

bcpkix-jdk15on-1.64.jar

Evidence

Identifiers

bcprov-jdk15on-1.64.jar

Evidence

Identifiers

byte-buddy-1.9.16.jar

Evidence

Identifiers

byte-buddy-1.9.16.jar (shaded: net.bytebuddy:byte-buddy-dep:1.9.16)

Evidence

Identifiers

byte-buddy-agent-1.10.22.jar

Evidence

Identifiers

byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll

Evidence

Identifiers

byte-buddy-agent-1.10.22.jar: attach_hotspot_windows.dll

Evidence

Identifiers

caffeine-2.9.2.jar

Evidence

Identifiers

checker-qual-3.10.0.jar

Evidence

Identifiers

classgraph-4.8.44.jar

Evidence

Identifiers

classmate-1.5.1.jar

Evidence

Identifiers

commons-codec-1.15.jar

Evidence

Identifiers

commons-collections4-4.4.jar

Evidence

Identifiers

commons-compress-1.21.jar

Evidence

Identifiers

commons-io-2.8.0.jar

Evidence

Identifiers

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor