Press CTR-C to copy XML [help]

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

### How to read the report | Suppressing false positives | Getting Help: github issues
Sponsor

## Project: project ':standalone'

#### pdfc:standalone:25.10

Scan Information (show all):

- dependency-check version: 10.0.3
- Report Generated On: Thu, 2 Oct 2025 12:18:38 +0200
- Dependencies Scanned: 128 (127 unique)
- Vulnerable Dependencies: 0
- Vulnerabilities Found: 0
- Vulnerabilities Suppressed: 1 (show)
- ...
- NVD API Last Checked: 2025-10-02T10:16:18Z
- NVD API Last Modified: 2024-09-18T11:15:10Z
- NVD Cache Last Checked: 2025-10-02T10:16:18Z
- NVD Cache Last Modified: 2024-09-18T11:15:10Z

## Summary

Display: Showing Vulnerable Dependencies (click to show all)

Dependency | Vulnerability IDs | Package | Highest Severity | CVE Count | Confidence | Evidence Count
--- | --- | --- | --- | --- | --- | ---
Merlia-0.jar |  | pkg:maven/lib/Merlia@0 |  | 0 |  | 12
analysis.language.zip: analysis.language.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
analysis.language.zip: guava.jar | cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* | pkg:maven/com.google.guava/guava@33.4.8-jre |  | 0 | Highest | 24
analysis.language.zip: jsonic.jar |  |  |  | 0 |  | 7
analysis.language.zip: language-detector.jar |  | pkg:maven/com.optimaize.languagedetector/language-detector@0.6 |  | 0 |  | 26
annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1) |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.1 |  | 0 |  | 9
annotations-3.0.1.jar |  | pkg:maven/com.google.code.findbugs/annotations@3.0.1 |  | 0 |  | 42
command.jsonexport.zip: command.jsonexport.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.api.zip: comparison.api.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 30
comparison.rpc.zip: comparison.rpc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 32
comparison.webgui.zip: comparison.webgui.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 22
comparison.webgui.zip: comparison.webgui.jar: app.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: compare.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: contingent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: controller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: dropzone.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: export.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: factory.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: model.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profil.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: profileentry.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishdialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: report.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: scroller.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: userlist.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js |  |  |  | 0 |  | 0
comparison.webgui.zip: comparison.webgui.jar: zoomer.js |  |  |  | 0 |  | 0
filter.area.zip: filter.area.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.baselinetable.zip: filter.baselinetable.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.cmappatch.zip: filter.cmappatch.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.headerfooter.zip: filter.headerfooter.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.hiderotation.zip: filter.hiderotation.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.invisibleelements.zip: filter.invisibleelements.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.multicolumn.zip: filter.multicolumn.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.ocr.zip: filter.ocr.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.pagerange.zip: filter.pagerange.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 32
filter.regex.zip: filter.regex.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.regex.zip: filter.regex.jar: filterrenderer.js |  |  |  | 0 |  | 0
filter.texttransform.zip: filter.texttransform.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
filter.urllookup.zip: filter.urllookup.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
hamcrest-3.0.jar |  | pkg:maven/org.hamcrest/hamcrest@3.0 |  | 0 |  | 17
inetcore-25.10-tools.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 9
inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null) |  |  |  | 0 |  | 27
inetcore-25.10.jar |  | pkg:maven/shared/inetcore@25.10 |  | 0 |  | 35
java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar | cpe:2.3:a:eclipse:platform:21.0.8:*:*:*:*:*:*:* |  |  | 0 | Medium | 12
jcip-annotations-1.0.jar |  | pkg:maven/net.jcip/jcip-annotations@1.0 |  | 0 |  | 13
jlessc-1.14.jar |  | pkg:maven/de.inetsoftware/jlessc@1.14 |  | 0 |  | 19
jsr305-3.0.2.jar |  | pkg:maven/com.google.code.findbugs/jsr305@3.0.2 |  | 0 |  | 20
junit-4.13.2.jar | cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* | pkg:maven/junit/junit@4.13.2 |  | 0 | Highest | 17
junit-jupiter-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 |  | 0 |  | 21
junit-jupiter-api-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 |  | 0 |  | 31
junit-jupiter-engine-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 |  | 0 |  | 33
junit-jupiter-params-5.13.4.jar |  | pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 |  | 0 |  | 32
junit-platform-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 |  | 0 |  | 34
junit-platform-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 |  | 0 |  | 32
junit-platform-launcher-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 |  | 0 |  | 33
junit-platform-suite-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 |  | 0 |  | 21
junit-platform-suite-api-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 |  | 0 |  | 34
junit-platform-suite-commons-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 |  | 0 |  | 34
junit-platform-suite-engine-1.13.4.jar |  | pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 |  | 0 |  | 34
junit-vintage-engine-5.13.4.jar |  | pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 |  | 0 |  | 33
maintenance.pdfc.zip: maintenance.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 22
maintenance.pdfc.zip: maintenance.pdfc.jar: app.js |  |  |  | 0 |  | 0
maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js |  |  |  | 0 |  | 0
ocr.tesseract.zip: commons-logging.jar |  | pkg:maven/commons-logging/commons-logging@1.3.4 |  | 0 |  | 127
ocr.tesseract.zip: fontbox.jar |  | pkg:maven/org.apache.pdfbox/fontbox@3.0.5 |  | 0 |  | 32
ocr.tesseract.zip: jai-imageio-core.jar |  | pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 |  | 0 |  | 40
ocr.tesseract.zip: jbig2-imageio.jar | cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 |  | 0 | Highest | 128
ocr.tesseract.zip: jboss-vfs.jar |  | pkg:maven/org.jboss/jboss-vfs@3.3.2.Final |  | 0 |  | 33
ocr.tesseract.zip: jna.jar | cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* |  |  | 0 | Low | 36
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: jna.jar: jnidispatch.dll |  |  |  | 0 |  | 2
ocr.tesseract.zip: lept4j.jar |  | pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 |  | 0 |  | 25
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: ocr.tesseract.jar | cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.198:*:*:*:*:*:*:* cpe:2.3:a:tesseract_project:tesseract:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 33
ocr.tesseract.zip: pdfbox.jar | cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* | pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 |  | 0 | Highest | 30
ocr.tesseract.zip: tess4j.jar | cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* | pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 |  | 0 | Low | 42
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
ocr.tesseract.zip: tess4j.jar: libtesseract541.dll |  |  |  | 0 |  | 4
opentest4j-1.3.0.jar |  | pkg:maven/org.opentest4j/opentest4j@1.3.0 |  | 0 |  | 23
parser.image.zip: parser.image.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.pdf.config.zip: parser.pdf.config.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 31
parser.text.zip: parser.text.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfc.standalone.zip: pdfc.standalone.jar: bridge.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: theme.js |  |  |  | 0 |  | 0
pdfc.standalone.zip: pdfc.standalone.jar: translation.js |  |  |  | 0 |  | 0
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1) |  | pkg:maven/com.ibm.icu/collate@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1) |  | pkg:maven/com.ibm.icu/core@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1) |  | pkg:maven/com.ibm.icu/currdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1) |  | pkg:maven/com.ibm.icu/langdata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1) |  | pkg:maven/com.ibm.icu/regiondata@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1) |  | pkg:maven/com.ibm.icu/translit@77.1 |  | 0 |  | 7
pdfc.zip: icu4j.jar | cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* | pkg:maven/com.ibm.icu/icu4j@77.1 |  | 0 | Low | 49
pdfc.zip: pdfc-javadoc.jar |  |  |  | 0 |  | 2
pdfc.zip: pdfc-javadoc.jar: jquery-3.6.1.min.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js |  | pkg:javascript/jquery-ui@1.13.1 |  | 0 |  | 3
pdfc.zip: pdfc-javadoc.jar: member-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: module-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: package-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: script.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: search.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: tag-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc-javadoc.jar: type-search-index.js |  |  |  | 0 |  | 0
pdfc.zip: pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 30
pdfcserver.zip: pdfcserver.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 31
pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js |  |  |  | 0 |  | 0
pdfcsetupwizard.zip: pdfcsetupwizard.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 21
pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js |  |  |  | 0 |  | 0
processbridge.pdfc.zip: processbridge.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 22
slf4j-api-2.0.16.jar |  | pkg:maven/org.slf4j/slf4j-api@2.0.16 |  | 0 |  | 32
taskplanner.pdfc.zip: taskplanner.pdfc.jar | cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* |  |  | 0 | Low | 21

## Dependencies (vulnerable)

### Merlia-0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/lib/Merlia/0/e4af937135679cc07f99529ee7ca127519bd3a06/Merlia-0.jar
MD5: 3eb81fb3cc977f1a3eb1fb26b2b38666
SHA1: e4af937135679cc07f99529ee7ca127519bd3a06
SHA256:b1d1878d936c27b010e6f3c123d8d7f2f7f6960a53e5b01b1b1c3d104c29b0a8
Referenced In Project/Scope: standalone:inetPlugin
Merlia-0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | Merlia-0 | High
Vendor | gradle | artifactid | Merlia | Highest
Vendor | gradle | groupid | lib | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | tds | Low
Product | file | name | Merlia-0 | High
Product | gradle | artifactid | Merlia | Highest
Product | jar | package name | tds | Low
Version | file | name | Merlia-0 | Medium
Version | file | version | 0 | Medium
Version | gradle | version | 0 | Highest
Version | Manifest | driver-version | 8.13 | Medium

#### Identifiers

- pkg:maven/lib/Merlia@0 (Confidence:Highest)

### analysis.language.zip: analysis.language.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/analysis.language.jar
MD5: e5a73cbbfe5de63153381c51e821aab2
SHA1: acbf126e0c23c54436b59eef8bbff094e9167b30
SHA256:2f89543a68e684a114f39f7120de3aa1bacc8c9b78e5c914979758e1c398a8ee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | analysis.language | High
Vendor | jar | package name | analysis | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:52 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | analysis.language | High
Product | jar | package name | analysis | Highest
Product | jar | package name | analysis | Low
Product | jar | package name | language | Highest
Product | jar | package name | language | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:52 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | analysis.language | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | analysis.language | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### analysis.language.zip: guava.jar

Description:

        Guava is a suite of core and expanded libraries that include
        utility classes, Google's collections, I/O classes, and
        much more.

License:

    http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/guava.jar
MD5: 72920caab34426c5815e3b00f80e3b01
SHA1: e70a3268e6cd3e7d458aa15787ce6811c34e96ae
SHA256:f3d7f57f67fd622f4d468dfdd692b3a5e3909246c28017ac3263405f0fe617ed
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | guava | High
Vendor | jar | package name | google | Highest
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Vendor | Manifest | bundle-symbolicname | com.google.guava | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | guava | Low
Vendor | pom | groupid | com.google.guava | Highest
Vendor | pom | name | Guava: Google Core Libraries for Java | High
Vendor | pom | parent-artifactid | guava-parent | Low
Vendor | pom | url | google/guava | Highest
Product | file | name | guava | High
Product | jar | package name | google | Highest
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | bundle-docurl | https://github.com/google/guava/ | Low
Product | Manifest | Bundle-Name | Guava: Google Core Libraries for Java | Medium
Product | Manifest | bundle-symbolicname | com.google.guava | Medium
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | guava | Highest
Product | pom | groupid | com.google.guava | Highest
Product | pom | name | Guava: Google Core Libraries for Java | High
Product | pom | parent-artifactid | guava-parent | Medium
Product | pom | url | google/guava | High
Version | pom | version | 33.4.8-jre | Highest

#### Identifiers

- pkg:maven/com.google.guava/guava@33.4.8-jre (Confidence:High)
- cpe:2.3:a:google:guava:33.4.8:*:*:*:*:*:*:* (Confidence:Highest)

### analysis.language.zip: jsonic.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/jsonic.jar
MD5: 504496d0069da0121c059c219147e90c
SHA1: 98e8a1f25aa40ed92ff2ecca4d1301d48b552452
SHA256:150e3ac24b103cb0cd50595018dbe3c8ba4b3dee81a76eb4b987607f96e9602b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsonic | High
Vendor | jar | package name | arnx | Low
Vendor | jar | package name | jsonic | Low
Vendor | jar | package name | net | Low
Product | file | name | jsonic | High
Product | jar | package name | arnx | Low
Product | jar | package name | jsonic | Low

#### Identifiers

- None

### analysis.language.zip: language-detector.jar

Description:

            Language Detection Library for Java.

License:

    Apache 2: http://www.apache.org/licenses/LICENSE-2.0

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/analysis.language.zip/language-detector.jar
MD5: e5475d5cabd54e5ddf6428d63864888f
SHA1: 52fee1eaa101f8d3e30b7095e1b6e0054d514dde
SHA256:f53ecc3d71da9ebc82edd10fb35638d32e8b9d849273dd717a021eca02f2278d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | language-detector | High
Vendor | jar | package name | langdetect | Low
Vendor | jar | package name | languagedetector | Highest
Vendor | jar | package name | optimaize | Highest
Vendor | jar | package name | optimaize | Low
Vendor | pom | artifactid | language-detector | Low
Vendor | pom | developer name | Fabian Kessler | Medium
Vendor | pom | developer name | François ROLAND | Medium
Vendor | pom | developer name | Nakatani Shuyo | Medium
Vendor | pom | developer name | Robert Theis | Medium
Vendor | pom | groupid | com.optimaize.languagedetector | Highest
Vendor | pom | name | language-detector | High
Vendor | pom | url | optimaize/language-detector | Highest
Product | file | name | language-detector | High
Product | jar | package name | langdetect | Low
Product | jar | package name | languagedetector | Highest
Product | jar | package name | optimaize | Highest
Product | pom | artifactid | language-detector | Highest
Product | pom | developer name | Fabian Kessler | Low
Product | pom | developer name | François ROLAND | Low
Product | pom | developer name | Nakatani Shuyo | Low
Product | pom | developer name | Robert Theis | Low
Product | pom | groupid | com.optimaize.languagedetector | Highest
Product | pom | name | language-detector | High
Product | pom | url | optimaize/language-detector | High
Version | pom | version | 0.6 | Highest

#### Identifiers

- pkg:maven/com.optimaize.languagedetector/language-detector@0.6 (Confidence:High)

### annotations-3.0.1.jar (shaded: com.google.code.findbugs:jsr305:3.0.1)

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar/META-INF/maven/com.google.code.findbugs/jsr305/pom.xml
MD5: d08567d16867a0b79bc8149683918452
SHA1: d04690f71f3393e23f30998d9534365274fa5f9f
SHA256:4170a761dc5bfd3981a8e6f7aab9e2acdce82d34fd5aa9bb11e3c090d25314ce
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.1 (Confidence:High)

### annotations-3.0.1.jar

Description:

    Annotation the FindBugs tool supports

License:

    GNU Lesser Public License: http://www.gnu.org/licenses/lgpl.html

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/annotations/3.0.1/fc019a2216218990d64dfe756e7aa20f0069dea2/annotations-3.0.1.jar
MD5: fc4f102f22ba4f1df3f1d7cc6b202152
SHA1: fc019a2216218990d64dfe756e7aa20f0069dea2
SHA256:6b47ff0a6de0ce17cbedc3abb0828ca5bce3009d53ea47b3723ff023c4742f79
Referenced In Project/Scope: standalone:inetPlugin
annotations-3.0.1.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | annotations | High
Vendor | gradle | artifactid | annotations | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | jar | package name | annotation | Highest
Vendor | jar | package name | annotations | Highest
Vendor | jar | package name | findbugs | Highest
Vendor | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Vendor | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Vendor | pom | artifactid | annotations | Low
Vendor | pom | developer email | Loskutov@gmx.de | Low
Vendor | pom | developer email | pugh at cs.umd.edu | Low
Vendor | pom | developer id | al | Medium
Vendor | pom | developer id | bp | Medium
Vendor | pom | developer name | Andrey Loskutov | Medium
Vendor | pom | developer name | Bill Pugh | Medium
Vendor | pom | developer name | Keith Lea | Medium
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-Annotations | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | annotations | High
Product | gradle | artifactid | annotations | Highest
Product | jar | package name | annotation | Highest
Product | jar | package name | annotations | Highest
Product | jar | package name | findbugs | Highest
Product | Manifest | Bundle-Name | FindBugs-Annotations | Medium
Product | Manifest | bundle-requiredexecutionenvironment | J2SE-1.5 | Low
Product | Manifest | bundle-symbolicname | findbugsAnnotations | Medium
Product | pom | artifactid | annotations | Highest
Product | pom | developer email | Loskutov@gmx.de | Low
Product | pom | developer email | pugh at cs.umd.edu | Low
Product | pom | developer id | al | Low
Product | pom | developer id | bp | Low
Product | pom | developer name | Andrey Loskutov | Low
Product | pom | developer name | Bill Pugh | Low
Product | pom | developer name | Keith Lea | Low
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-Annotations | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.1 | High
Version | gradle | version | 3.0.1 | Highest
Version | Manifest | Bundle-Version | 3.0.1 | High
Version | pom | version | 3.0.1 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/annotations@3.0.1 (Confidence:High)

### command.jsonexport.zip: command.jsonexport.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/command.jsonexport.zip/command.jsonexport.jar
MD5: d30db9f2db5207dcb853ae35bf92735a
SHA1: 80a4cc2c25b46101df3f74509e1873a7952780ef
SHA256:c6490bcf6714297a1df8c6316b42377524c3445d5a4b89dd3571941980dabd9e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | command.jsonexport | High
Vendor | jar | package name | command | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:51 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | command.jsonexport | High
Product | jar | package name | command | Highest
Product | jar | package name | command | Low
Product | jar | package name | json | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:51 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | command.jsonexport | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | command.jsonexport | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### comparison.api.zip: comparison.api.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.api.zip/comparison.api.jar
MD5: 29849d8ef2af110c889d4dfcbeff0d04
SHA1: 4727246c25dddd54d1c10e9d750d0d40f06e6dc9
SHA256:d5993bbf643f9c014e7ac7ed6ec27e21ba26f8ce302ad6b21df778ada9ff4b7d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.api | High
Vendor | jar | package name | comparisonapi | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.api | High
Product | jar | package name | comparisonapi | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.api | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.api | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### comparison.rpc.zip: comparison.rpc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.rpc.zip/comparison.rpc.jar
MD5: 8a43b7b219019f20f11ae3080915282b
SHA1: 404be3a5272209416754837ebcd71352bfc0cb82
SHA256:b6e4607000d7b6c8009aef892634e4468927dfc94a4c36891c1284891a04b21c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.rpc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | rpc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.rpc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | rpc | Highest
Product | jar | package name | rpc | Low
Product | jar | package name | websocket | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.rpc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | comparison.rpc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar
MD5: 751872809b906e26a9ec1aadba800194
SHA1: a69584ea4b1ed827c0ce6b6ad770c27ae8b3a7b0
SHA256:e324f87786958a0f7299f6ce7d74d97decc5acb93ad838dc8c54a6261978a46e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | comparison.webgui | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | webgui | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | comparison.webgui | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | server | Low
Product | jar | package name | webgui | Highest
Product | jar | package name | webgui | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | comparison.webgui | High
Product | Manifest | specification-title | comparison.webgui | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### comparison.webgui.zip: comparison.webgui.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/app.js
MD5: 2e4ad8b6a0f9a76284c281df29d4ae4d
SHA1: c715d01b3797ea1cc4e3615d97412a8d2cf8a067
SHA256:c1ace93a6f794644bab65004932e9335d040e375a3d93c6ca4f7029bc5e06e59
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: compare.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/compare.js
MD5: 6b51954c7a299af1f898d3f564bde203
SHA1: c840cfecd51004f94fd0ee982c9db6ee63fb04cc
SHA256:6a7ab442206a31de5e93cd43b3736f314afd89a075e642d6c72a5891f01ae06e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contextmenuextension.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/drive/contextmenuextension.js
MD5: b5f087715014cac13f4ccbc40c947f1c
SHA1: bf853c9b9c629eb66ce96fd12a24e973aa2cb1c6
SHA256:3096c6232dfe34a586f3d3bf0175b12bbd3b20a25d2f499da0aaa390a122d97b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: contingent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/contingent.js
MD5: 10782a90b423f2db0450adaa8944f25a
SHA1: 8d7242260155b1bc6cbca8cd0fa034c3be0c021b
SHA256:c54c35e7c00b764c4e9b7511916a30510158e88b8c8e5ee4d61c7302a7d87295
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/controller.js
MD5: aacf28f3a507db78d714d36140550854
SHA1: 17c29a4631e4ae05cd4cefb76cea06e6ee94046f
SHA256:b305eec27b595654e3edced1f288390c04ce7f19f8fd058129dbf5167c9cd05c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: descriptionarea.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/descriptionarea.js
MD5: 14028f3ecbcfc96a785ea29eec407af0
SHA1: c89033c6f1414aabc1e006e78079167ab6ffb194
SHA256:64973d746a823e043ad9df56ce9aff83dbe2f89cea86bed498cfe1dc82d799ca
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: dropzone.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/dropzone.js
MD5: 2856733a745b9f8fdb7e8f5806f32299
SHA1: e644c116bc9337732ee3fd448430f5ad7c9056f1
SHA256:37993d37570580a0b7d0ab92083862738ab1aa30c9767241a29173342a08e1bb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: export.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/export.js
MD5: e1a2cc48050ef9b378b8a53a081d082a
SHA1: 5cd7fe1140bd00b2f6db400724b659ae7abbadd9
SHA256:17fe08df83d82b913f8d1416e4ce5c2530ee55f4a35348f6c9dad90fde158ec7
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: factory.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/factory.js
MD5: 74c60c48fbcc1dea077c4e2a1f617446
SHA1: 09bad3af86aad6976b1898fb818c73aa532efeb5
SHA256:4c7ce44ad7127235a295e80100e58fd41897a69602fac5320c774560546061a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: model.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/model.js
MD5: a0ce24ce0abb9a25fbcb93919008d176
SHA1: 91de96e8843f7ed1bba7b94b4d869f3e7c07f2ad
SHA256:6deeec42335e4e4062ab72773fa598a37afda2b1207451a35d6ee9df31124836
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: multipasswordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/multipasswordpanel.js
MD5: 34d4d5fd0cf1fa77d569e928af1a00aa
SHA1: 230e35fe5f8f5a48ccd930cee3c79f16df858b97
SHA256:28be5c583ef3c82dca061d79f33a43f3672421b6a1b42e460a444f296d49a79a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: mycomparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/mycomparisons.js
MD5: ec823fcf834bc8b9c79050fc5ee6a84e
SHA1: 0683120ef8ec8c044248b93375348549fce783d5
SHA256:713e5065e3623b225277c4718c9763e2785272ded0b6cc476f0ff20724401017
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: passwordpanel.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/passwordpanel.js
MD5: 4e69b1954226ce194fd836df7ad77e35
SHA1: 6e79c7f2354f08c8effe8adfd66c6dcaff4bdb8c
SHA256:6078c754f425f4087a05cf8e6aca77ab5b6c9df996e5143d730f32bd8f46ca21
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: pdfcconfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/pdfcconfig.js
MD5: 676338e9e274fd0d9ab59db49e3ea86f
SHA1: 5c8a910bd5453a9e9ff6163db9f760533e9db5b6
SHA256:3cbb5959eb832a0c7880d2a0c58a4f82cc6e66b177b4aeeef49a87540265b96f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profil.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/profil.js
MD5: a80e7a67200f9bebc58cc1b1f648ba81
SHA1: 67a71dca22d20ed3e4cacd59e7b013052bba6059
SHA256:1eb1aed349f9e8d0781de9f352733a58b6a4fcac9e89d259888005099b5216d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: profileentry.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/profileentry.js
MD5: 70fba9a0806250f9fc3f559012ebdfc5
SHA1: 911155de0ffa9aff766b028eff7d2a74557da44c
SHA256:7dc35ebc9b13805fc2160bd904bea53c880ab49854079e55e4f141984b6ab075
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishdialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/publishdialog.js
MD5: 3c6b3557cb70409b766dcadc7593ef40
SHA1: 15ab54e19f4ed112a10fc9bb380d5613f4c9e10f
SHA256:bc6ff09abcaa54afd0b07b558cec428824f5e1b157a5459e3eb2308802eca100
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: publishprofiledialog.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/publishprofiledialog.js
MD5: 15cb57cdb21d62986b893e35495ac8d0
SHA1: 060e44459b5a3e7b684be7a9faaefd5683a22ea9
SHA256:c1ce1c1ef7c98cb682a6844bec27307b2e7aee3403b607ce6743394984d5f481
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: report.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/report.js
MD5: 161485eaea5b9b5f65d479f48911c56f
SHA1: edc976c964a05132b9b34aa9b3d8d282147bbc04
SHA256:35e773c2f1fa99f13a7aac090863d403636547f5b7df7e0c05a88b3eda6f1ecc
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: scroller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/scroller.js
MD5: 258842a58c95114e959f659bfa15d9a7
SHA1: f947fcba0b63cc56cacedf1d9f3f812b3330586b
SHA256:4d7e9feb475bec916fc11571fbf16ac1f9113abf4db43bdd18bd4f3ae0560666
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: searchcomponent.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/searchcomponent.js
MD5: bdc3caac35d953edd2e6f68c0d4bfd74
SHA1: ef70a291cb7226084945b2648356f3a389b7fa58
SHA256:36620c84f1984fc0d8f98256fb345a0329ab25c834dcfa8c916d552ff370799e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: userlist.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/userlist.js
MD5: f0280a91fc83e571ef486c22a7f93ef7
SHA1: 68abf77cf988cad21dd9dad06a89175f906b1d9e
SHA256:1b0b6bc3b19aa7a697b17a94c617ad8e1807b10ac7de9d9292bfdc3f929c41cb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: visibilitysettings.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/visibilitysettings.js
MD5: 1f6d120c92d4c7e6c41cc4368b09ebac
SHA1: 9cdf600708312b16e2d9eadd26aea32da1ffc7d2
SHA256:50fe2d4678259193d90aae7c481487d02566b4c92ba3ca4d7c2cf13c9e345250
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### comparison.webgui.zip: comparison.webgui.jar: zoomer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/comparison.webgui.zip/comparison.webgui.jar/com/inet/pdfc/webgui/client/js/directives/zoomer.js
MD5: 9292c505ec54cc329a2c2f0dc6612a43
SHA1: 724665a18dfc42d5fb8ba99a8010022de75bfccd
SHA256:d9d4db5a4a662a0887793825308e350047a54dc41810200c7ffb732c57a61f1c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.area.zip: filter.area.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.area.zip/filter.area.jar
MD5: 1abf314baee305ce3fbfcb37ce04887b
SHA1: 859a9a27a8bf9243bbe415c4a9f9cd106fdc3b32
SHA256:c7671ab0962dcfaa39704a429190cb8cde7e403ee5e2d3381f8c4f300bb50e32
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.area | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:50 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.area | High
Product | jar | package name | area | Highest
Product | jar | package name | area | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:50 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.area | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.area | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.baselinetable.zip: filter.baselinetable.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.baselinetable.zip/filter.baselinetable.jar
MD5: ee397e13e3bf4692f35fdd4058fd6a37
SHA1: e18645d214fa94e3acb43f36c606cdeee8754985
SHA256:a87b0b723adb41bddcc4139a83676b7fa54b983aad9c602286c6234ffe36969a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.baselinetable | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:49 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.baselinetable | High
Product | jar | package name | baselinetable | Highest
Product | jar | package name | baselinetable | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:49 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.baselinetable | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.baselinetable | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.cmappatch.zip: filter.cmappatch.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.cmappatch.zip/filter.cmappatch.jar
MD5: a7e467842ce0ee4d1e0fad9840e374dd
SHA1: 85eb654f440cae23b182ce3aafcc14807be9ccbd
SHA256:d3be5612ff63832461921883e3e73875bd30565bb2dc2acdc41b01acb7a71c82
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.cmappatch | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.cmappatch | High
Product | jar | package name | cmappatch | Highest
Product | jar | package name | cmappatch | Low
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.cmappatch | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.cmappatch | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.headerfooter.zip: filter.headerfooter.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.headerfooter.zip/filter.headerfooter.jar
MD5: d46eb385d8e5c90d5bdc458928a1ca9d
SHA1: f627b0a69011566801e0bdcd2c66d82c8ae979cd
SHA256:11a6b1ca5064f2ca2fdd99c56a17d24efa26a992cb17c7b2fef27f007dc2f3f2
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.headerfooter | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.headerfooter | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | headerfooter | Highest
Product | jar | package name | headerfooter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.headerfooter | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.headerfooter | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.hiderotation.zip: filter.hiderotation.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.hiderotation.zip/filter.hiderotation.jar
MD5: f19ce969d03d967d443d075cfefc12ad
SHA1: e657efbdacdc5e9cbc532a568076e161aba06f6f
SHA256:9a0f7cad82131426f33f2719610856032c7e0f9e77fb48050d01a3b8207a67ae
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.hiderotation | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.hiderotation | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | hiderotation | Highest
Product | jar | package name | hiderotation | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.hiderotation | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.hiderotation | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.invisibleelements.zip: filter.invisibleelements.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.invisibleelements.zip/filter.invisibleelements.jar
MD5: 68060c423e03c58594648ce141d93d00
SHA1: 83870d37bfab5b85fa25dbed1a93cd5cec554da7
SHA256:c19c4075e034467b1fc3e559c18591a01cb848664c612bc5e4f1b27b5cad91d8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.invisibleelements | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.invisibleelements | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | invisibleelements | Highest
Product | jar | package name | invisibleelements | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.invisibleelements | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.invisibleelements | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.multicolumn.zip: filter.multicolumn.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.multicolumn.zip/filter.multicolumn.jar
MD5: 53ffe25c4576ce5895d3cc5aae3dc6e4
SHA1: 4359c8729b00e20ed5b26656c4326da04ab622eb
SHA256:fee12969e5d1b307e33306b86e104004eece8f537b2a8f9e76da947fecc69291
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.multicolumn | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.multicolumn | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | multicolumn | Highest
Product | jar | package name | multicolumn | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.multicolumn | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.multicolumn | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.ocr.zip: filter.ocr.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.ocr.zip/filter.ocr.jar
MD5: cf44ddc87d5a383612338a67ed0efaaf
SHA1: 0ba3ce0758e88c45114222eb7395cedb32715486
SHA256:c540354d160260b6c1b0d8bfd2a462327723eb441fa361925d2f52b746d6ea79
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.ocr | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.ocr | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.ocr | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.ocr | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.pagerange.zip: filter.pagerange.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.pagerange.zip/filter.pagerange.jar
MD5: d43d9d77c2d4c34ac1db184472122e48
SHA1: 69a60d2bf2fd06061c9c5f347e50c6b5d96fc37a
SHA256:95a3202c2204295555c45578a279c29c2bc0e11f982fdfe095e2742d14222dd4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.pagerange | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:49 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.pagerange | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | page | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:49 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.pagerange | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.pagerange | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar
MD5: 7ca29a4826c6c500befb6362ec3445b3
SHA1: d206ca96803468a66c7f68ead9d5c3ef4d576b8b
SHA256:27b79751a6476beea58f90e769065eb3f6231355573eb1956359268efcd4c804
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.regex | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.regex | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | regex | Highest
Product | jar | package name | regex | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.regex | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.regex | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.regex.zip: filter.regex.jar: filterrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.regex.zip/filter.regex.jar/com/inet/pdfc/filter/regex/structure/filterrenderer.js
MD5: fed6198a818efccd3e71fac743e61c3f
SHA1: dc6d579196c5b147daac7e14e034e2b004ca36f2
SHA256:87b3e46faf43504c51e1ad9407e3d6c17a3bcd8170c14ea7df3b1f4282275442
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### filter.texttransform.zip: filter.texttransform.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.texttransform.zip/filter.texttransform.jar
MD5: ab76120409cffcd70dada0e7480412d4
SHA1: 6245d0ca42253d13ea06952b38caeeb4100f739b
SHA256:18abb86002c73d832fe4d180ff1eb81a85427cf4d705c4eef6d98bb8f02efd11
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.texttransform | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:48 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.texttransform | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | texttransform | Highest
Product | jar | package name | texttransform | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:48 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.texttransform | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.texttransform | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### filter.urllookup.zip: filter.urllookup.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/filter.urllookup.zip/filter.urllookup.jar
MD5: 9771136fb25c372e1290e102d3a887e1
SHA1: d2db3ea30e52fa123c59df57ee80a7dc7f5da7f0
SHA256:3c4578204aacd621839fbb2b2b77ac647fcd49c44b508407954e2e050b4bf14c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | filter.urllookup | High
Vendor | jar | package name | filter | Low
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:51 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | filter.urllookup | High
Product | jar | package name | filter | Highest
Product | jar | package name | filter | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | urllookup | Highest
Product | jar | package name | urllookup | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:51 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | filter.urllookup | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | filter.urllookup | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### hamcrest-3.0.jar

License:

    BSD-3-Clause

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.hamcrest/hamcrest/3.0/8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7/hamcrest-3.0.jar
MD5: 781023c38b054e9cf1c818c77895e1eb
SHA1: 8fd9b78a8e6a6510a078a9e30e9e86a6035cfaf7
SHA256:5d66b6a4a680755cb6ed7cb104fa7835ef644667586ff0737adeb977c39ecdbc
Referenced In Project/Scope: standalone:inetPlugin
hamcrest-3.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | hamcrest | High
Vendor | gradle | artifactid | hamcrest | Highest
Vendor | gradle | groupid | org.hamcrest | Highest
Vendor | jar | package name | hamcrest | Highest
Vendor | jar | package name | hamcrest | Low
Vendor | Manifest | automatic-module-name | org.hamcrest | Medium
Vendor | Manifest | bundle-symbolicname | org.hamcrest | Medium
Vendor | Manifest | Implementation-Vendor | hamcrest.org | High
Product | file | name | hamcrest | High
Product | gradle | artifactid | hamcrest | Highest
Product | jar | package name | hamcrest | Highest
Product | Manifest | automatic-module-name | org.hamcrest | Medium
Product | Manifest | Bundle-Name | org.hamcrest | Medium
Product | Manifest | bundle-symbolicname | org.hamcrest | Medium
Product | Manifest | Implementation-Title | hamcrest | High
Version | file | version | 3.0 | High
Version | Manifest | Implementation-Version | 3.0 | High

#### Identifiers

- pkg:maven/org.hamcrest/hamcrest@3.0 (Confidence:Highest)

### inetcore-25.10-tools.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/46814e59cb867fdfce898ef1842908fc2bcce598/inetcore-25.10-tools.jar
MD5: 6c9243acd78d34ca4371c7f53902992b
SHA1: 46814e59cb867fdfce898ef1842908fc2bcce598
SHA256:aa4f104d4fcc1385f1065eb5eeff4e31957cb3b6fd5c4d5d72225d20bc20217e
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10-tools.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | test | Low
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### inetcore-25.10.jar (shaded: com.inet.shared:inetcore:null)

Description:

    A blend composite defines the rule according to which a drawing primitive (known as the source) is mixed with existing graphics (know as the destination.)

    ColorUtilities contains a set of tools to perform common color operations easily.

License:

    LGPL: http://www.gnu.org/licenses/lgpl.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/3f2c21c4bd60125b0091c24bc8552cdc002dd380/inetcore-25.10.jar/META-INF/com/inet/shared/utils/BlendComposite/pom.xml
MD5: 15e3963148212192804e2b1a2b73ad1c
SHA1: 1095ba4522949a04590ab9c98b7f684e92579ef9
SHA256:e5556987ad0b1ede84a994741147dadf6de0cb7d80b845f530e2a96505b79151
Referenced In Project/Scope: standalone:inetPlugin

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | inetcore | Low
Vendor | pom | developer email | contact@inetsoftware.de | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer id | inetsoftware | Medium
Vendor | pom | developer id | romainguy | Medium
Vendor | pom | developer id | sun | Medium
Vendor | pom | developer name | i-net /// software | Medium
Vendor | pom | developer name | Romain Guy | Medium
Vendor | pom | developer name | Sun | Medium
Vendor | pom | developer org | Sun | Medium
Vendor | pom | groupid | com.inet.shared | Highest
Vendor | pom | name | BlendComposite and ColorUtilities | High
Vendor | pom (hint) | developer id | oracle | Medium
Vendor | pom (hint) | developer name | oracle | Medium
Vendor | pom (hint) | developer org | oracle | Medium
Product | pom | artifactid | inetcore | Highest
Product | pom | developer email | contact@inetsoftware.de | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer id | inetsoftware | Low
Product | pom | developer id | romainguy | Low
Product | pom | developer id | sun | Low
Product | pom | developer name | i-net /// software | Low
Product | pom | developer name | Romain Guy | Low
Product | pom | developer name | Sun | Low
Product | pom | developer org | Sun | Low
Product | pom | groupid | com.inet.shared | Highest
Product | pom | name | BlendComposite and ColorUtilities | High

#### Identifiers

- None

### inetcore-25.10.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/shared/inetcore/25.10/3f2c21c4bd60125b0091c24bc8552cdc002dd380/inetcore-25.10.jar
MD5: e31f3f6720ee1693e2d2fb3a19d6f869
SHA1: 3f2c21c4bd60125b0091c24bc8552cdc002dd380
SHA256:c4c9b50f85eca48e1a280ea7e59e7b263c370d5e12e25d4d4d6d0db8dedfb3d3
Referenced In Project/Scope: standalone:inetPlugin
inetcore-25.10.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | inetcore | High
Vendor | gradle | artifactid | inetcore | Highest
Vendor | gradle | groupid | shared | Highest
Vendor | jar | package name | i | Highest
Vendor | jar | package name | inet | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 17:02 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | shared | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | inetcore | High
Product | gradle | artifactid | inetcore | Highest
Product | jar | package name | permissions | Highest
Product | jar | package name | shared | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 17:02 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | shared | Low
Product | Manifest | Implementation-Title | inetcore | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | inetcore | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | file | name | inetcore | Medium
Version | file | version | 25.10 | High
Version | gradle | version | 25.10 | Highest
Version | jar | package name | permissions | Highest
Version | jar | package name | shared | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- pkg:maven/shared/inetcore@25.10 (Confidence:Highest)

### java-21-jre-x64-linux.tar.gz: java-21-jre-x64-linux.tar: jrt-fs.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/java-21-jre-x64-linux.tar.gz/java-21-jre-x64-linux.tar/jre-11/lib/jrt-fs.jar
MD5: fd232b1a93c699d86f56595d88cc54da
SHA1: 5c034ec23e7858f7e3a5be3970833e12a9555f11
SHA256:ca81222a25fccfd0ecc9ef5c3d1efee0634e7938ab3c245e69b5bc0a55019028
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jrt-fs | High
Vendor | jar | package name | internal | Low
Vendor | jar | package name | jdk | Low
Vendor | jar | package name | jimage | Low
Vendor | Manifest | Implementation-Vendor | Eclipse Adoptium | High
Vendor | Manifest | specification-vendor | Oracle Corporation | Low
Product | file | name | jrt-fs | High
Product | jar | package name | internal | Low
Product | jar | package name | jimage | Low
Product | Manifest | Implementation-Title | Java Runtime Environment | High
Product | Manifest | specification-title | Java Platform API Specification | Medium
Version | Manifest | Implementation-Version | 21.0.8 | High

#### Identifiers

- cpe:2.3:a:eclipse:platform:21.0.8:*:*:*:*:*:*:* (Confidence:Medium)

### jcip-annotations-1.0.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/net.jcip/jcip-annotations/1.0/afba4942caaeaf46aab0b976afd57cc7c181467e/jcip-annotations-1.0.jar
MD5: 9d5272954896c5a5d234f66b7372b17a
SHA1: afba4942caaeaf46aab0b976afd57cc7c181467e
SHA256:be5805392060c71474bf6c9a67a099471274d30b83eef84bfc4e0889a4f1dcc0
Referenced In Project/Scope: standalone:inetPlugin
jcip-annotations-1.0.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jcip-annotations | High
Vendor | gradle | artifactid | jcip-annotations | Highest
Vendor | gradle | groupid | net.jcip | Highest
Vendor | jar | package name | annotations | Low
Vendor | jar | package name | jcip | Low
Vendor | jar | package name | net | Low
Product | file | name | jcip-annotations | High
Product | gradle | artifactid | jcip-annotations | Highest
Product | jar | package name | annotations | Low
Product | jar | package name | jcip | Low
Version | file | name | jcip-annotations | Medium
Version | file | version | 1.0 | High
Version | gradle | version | 1.0 | Highest

#### Identifiers

- pkg:maven/net.jcip/jcip-annotations@1.0 (Confidence:Highest)

### jlessc-1.14.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/de.inetsoftware/jlessc/1.14/5b2789630acdc41bab5c86da8937ffef3811a3c3/jlessc-1.14.jar
MD5: 73ef6dc09f0efda918ffcf67677ad2b0
SHA1: 5b2789630acdc41bab5c86da8937ffef3811a3c3
SHA256:5445ebb2231d943301b977e2b30451fc704835ea9b5f96fa64618c608938cb52
Referenced In Project/Scope: standalone:inetPlugin
jlessc-1.14.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jlessc | High
Vendor | gradle | artifactid | jlessc | Highest
Vendor | gradle | groupid | de.inetsoftware | Highest
Vendor | jar | package name | inet | Low
Vendor | jar | package name | less | Low
Vendor | jar | package name | lib | Low
Vendor | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Vendor | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Vendor | Manifest | Implementation-Vendor | i-net software GmbH, Berlin, Germany | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Product | file | name | jlessc | High
Product | gradle | artifactid | jlessc | Highest
Product | jar | package name | less | Low
Product | jar | package name | lib | Low
Product | Manifest | automatic-module-name | de.inetsoftware.jlessc | Medium
Product | Manifest | bundle-symbolicname | de.inetsoftware.jlessc | Medium
Product | Manifest | Implementation-Title | JLessC, a Less CSS compiler | High
Version | file | version | 1.14 | High
Version | Manifest | Implementation-Version | 1.14 | High

#### Identifiers

- pkg:maven/de.inetsoftware/jlessc@1.14 (Confidence:Highest)

### jsr305-3.0.2.jar

Description:

    JSR305 Annotations for Findbugs

License:

    The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/com.google.code.findbugs/jsr305/3.0.2/25ea2e8b0c338a877313bd4672d3fe056ea78f0d/jsr305-3.0.2.jar
MD5: dd83accb899363c32b07d7a1b2e4ce40
SHA1: 25ea2e8b0c338a877313bd4672d3fe056ea78f0d
SHA256:766ad2a0783f2687962c8ad74ceecc38a28b9f72a2d085ee438b7813e928d0c7
Referenced In Project/Scope: standalone:inetPlugin
jsr305-3.0.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/de.inetsoftware/jlessc@1.14

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jsr305 | High
Vendor | gradle | artifactid | jsr305 | Highest
Vendor | gradle | groupid | com.google.code.findbugs | Highest
Vendor | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Vendor | pom | artifactid | jsr305 | Low
Vendor | pom | groupid | com.google.code.findbugs | Highest
Vendor | pom | name | FindBugs-jsr305 | High
Vendor | pom | url | http://findbugs.sourceforge.net/ | Highest
Product | file | name | jsr305 | High
Product | gradle | artifactid | jsr305 | Highest
Product | Manifest | Bundle-Name | FindBugs-jsr305 | Medium
Product | Manifest | bundle-symbolicname | org.jsr-305 | Medium
Product | pom | artifactid | jsr305 | Highest
Product | pom | groupid | com.google.code.findbugs | Highest
Product | pom | name | FindBugs-jsr305 | High
Product | pom | url | http://findbugs.sourceforge.net/ | Medium
Version | file | version | 3.0.2 | High
Version | gradle | version | 3.0.2 | Highest
Version | Manifest | Bundle-Version | 3.0.2 | High
Version | pom | version | 3.0.2 | Highest

#### Identifiers

- pkg:maven/com.google.code.findbugs/jsr305@3.0.2 (Confidence:High)

### junit-4.13.2.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/junit/junit/4.13.2/8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12/junit-4.13.2.jar
MD5: d98a9a02a99a9acd22d7653cbcc1f31f
SHA1: 8ac9e16d933b6fb43bc7f576336b8f4d7eb5ba12
SHA256:8e495b634469d64fb8acfa3495a065cbacc8a0fff55ce1e31007be4c16dc57d3
Referenced In Project/Scope: standalone:inetPlugin
junit-4.13.2.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit | High
Vendor | gradle | artifactid | junit | Highest
Vendor | gradle | groupid | junit | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | Manifest | automatic-module-name | junit | Medium
Vendor | Manifest | implementation-url | http://junit.org | Low
Vendor | Manifest | Implementation-Vendor | JUnit | High
Vendor | Manifest | Implementation-Vendor-Id | junit | Medium
Product | file | name | junit | High
Product | gradle | artifactid | junit | Highest
Product | jar | package name | junit | Highest
Product | Manifest | automatic-module-name | junit | Medium
Product | Manifest | Implementation-Title | JUnit | High
Product | Manifest | implementation-url | http://junit.org | Low
Version | file | version | 4.13.2 | High
Version | Manifest | Implementation-Version | 4.13.2 | High

#### Identifiers

- pkg:maven/junit/junit@4.13.2 (Confidence:Highest)
- cpe:2.3:a:junit:junit4:4.13.2:*:*:*:*:*:*:* (Confidence:Highest)

### junit-jupiter-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter/5.13.4/93547b3eca48a61f65f735c1898d3ec196e34149/junit-jupiter-5.13.4.jar
MD5: 3f4e38bdbea73c98a50f08b7c6e33426
SHA1: 93547b3eca48a61f65f735c1898d3ec196e34149
SHA256:b960f79217dd01c863031b678f07df4730bbf1eac650c74ad6b0c61faad78379
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter | High
Vendor | gradle | artifactid | junit-jupiter | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter | High
Product | gradle | artifactid | junit-jupiter | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter | Medium
Product | Manifest | Implementation-Title | junit-jupiter | High
Product | Manifest | specification-title | junit-jupiter | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4 (Confidence:Highest)

### junit-jupiter-api-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-api/5.13.4/2817f736551fe4949b79924715ef6f594ee072f4/junit-jupiter-api-5.13.4.jar
MD5: d9981621212d598a4ba380342094c92f
SHA1: 2817f736551fe4949b79924715ef6f594ee072f4
SHA256:d1bb81abfd9e03418306b4e6a3390c8db52c58372e749c2980ac29f0c08278f1
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-api-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-api | High
Vendor | gradle | artifactid | junit-jupiter-api | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | api | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-api | High
Product | gradle | artifactid | junit-jupiter-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter API | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-api | Medium
Product | Manifest | Implementation-Title | junit-jupiter-api | High
Product | Manifest | specification-title | junit-jupiter-api | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-api@5.13.4 (Confidence:Highest)

### junit-jupiter-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-engine/5.13.4/d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8/junit-jupiter-engine-5.13.4.jar
MD5: 3416ff6cff3dd4ea789b92338a49b9b2
SHA1: d29fc8b6a28d21b8741f299ae4deb3e3aa68b2e8
SHA256:027404a92fe618b72465792a257951495c503a7d5751e2791e0f51c87f67f5bc
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-engine | High
Vendor | gradle | artifactid | junit-jupiter-engine | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-engine | High
Product | gradle | artifactid | junit-jupiter-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Engine | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-engine | Medium
Product | Manifest | Implementation-Title | junit-jupiter-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-jupiter-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4 (Confidence:Highest)

### junit-jupiter-params-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.jupiter/junit-jupiter-params/5.13.4/c8930eb7fcfbed0b191703ab53f48475a75bd17/junit-jupiter-params-5.13.4.jar
MD5: a1db21cc54b627a085918626a3908c9e
SHA1: 0c8930eb7fcfbed0b191703ab53f48475a75bd17
SHA256:3a8c6365716dbb698c0d49a05456c1e1ad05c406613c550f9dd50037872efc41
Referenced In Project/Scope: standalone:inetPlugin
junit-jupiter-params-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-jupiter-params | High
Vendor | gradle | artifactid | junit-jupiter-params | Highest
Vendor | gradle | groupid | org.junit.jupiter | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | jupiter | Highest
Vendor | jar | package name | jupiter | Low
Vendor | jar | package name | params | Highest
Vendor | jar | package name | params | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-jupiter-params | High
Product | gradle | artifactid | junit-jupiter-params | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | jupiter | Highest
Product | jar | package name | jupiter | Low
Product | jar | package name | params | Highest
Product | jar | package name | params | Low
Product | jar | package name | shadow | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Jupiter Params | Medium
Product | Manifest | bundle-symbolicname | junit-jupiter-params | Medium
Product | Manifest | Implementation-Title | junit-jupiter-params | High
Product | Manifest | specification-title | junit-jupiter-params | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.jupiter/junit-jupiter-params@5.13.4 (Confidence:Highest)

### junit-platform-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-commons/1.13.4/8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5/junit-platform-commons-1.13.4.jar
MD5: 7c39b85780e5bec0a23408959ac83fa9
SHA1: 8f63c7ed05b473d95cc63d1082054d7bfcf9c0e5
SHA256:1c25ca641ebaae44ff3ad21ca1b2ef68d0dd84bfeb07c4805ba7840899b77408
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-commons | High
Vendor | gradle | artifactid | junit-platform-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | commons | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | org | Highest
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-commons | High
Product | gradle | artifactid | junit-platform-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-commons | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | junit-platform-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-commons@1.13.4 (Confidence:Highest)

### junit-platform-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-engine/1.13.4/cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb/junit-platform-engine-1.13.4.jar
MD5: 736aa9e83f7ba2b54adb5f86821fd4dd
SHA1: cdd49063ae6e25494d1a9a08f4a9ab5de2b73bcb
SHA256:390c5f77b84283a64b644f88251b397e0b0debb80bdcc50f899881aecff43a5a
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-engine | High
Vendor | gradle | artifactid | junit-platform-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-engine | High
Product | gradle | artifactid | junit-platform-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | support | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Engine API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-engine | High
Product | Manifest | specification-title | junit-platform-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-engine@1.13.4 (Confidence:Highest)

### junit-platform-launcher-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-launcher/1.13.4/e72a4d00af6177569fd57df4c8c4bb241c6aa4b6/junit-platform-launcher-1.13.4.jar
MD5: bdfea9c8c038752c70631934b2067073
SHA1: e72a4d00af6177569fd57df4c8c4bb241c6aa4b6
SHA256:0b0beaeb6880a31149641d2d848b863712885469670c12099586d7f798522564
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-launcher-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-launcher | High
Vendor | gradle | artifactid | junit-platform-launcher | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | launcher | Highest
Vendor | jar | package name | launcher | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-launcher | High
Product | gradle | artifactid | junit-platform-launcher | Highest
Product | jar | package name | junit | Highest
Product | jar | package name | launcher | Highest
Product | jar | package name | launcher | Low
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Launcher | Medium
Product | Manifest | bundle-symbolicname | junit-platform-launcher | Medium
Product | Manifest | Implementation-Title | junit-platform-launcher | High
Product | Manifest | provide-capability | org.junit.platform.launcher;org.junit.platform.launcher=junit-platform-launcher;version:Version="1.13.4" | Low
Product | Manifest | specification-title | junit-platform-launcher | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-launcher@1.13.4 (Confidence:Highest)

### junit-platform-suite-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite/1.13.4/7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7/junit-platform-suite-1.13.4.jar
MD5: 378c01f6aba4143235fcd78ee5e1490f
SHA1: 7af47cc4d0fbbd9a940644799a69f1f4c3ec4ee7
SHA256:8088a80b47f5a7e73fa107f466dfa6a86776ca496fc2e7724aba65202d467913
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite | High
Vendor | gradle | artifactid | junit-platform-suite | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | module-info | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite | High
Product | gradle | artifactid | junit-platform-suite | Highest
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite (Aggregator) | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite | Medium
Product | Manifest | Implementation-Title | junit-platform-suite | High
Product | Manifest | specification-title | junit-platform-suite | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4 (Confidence:Highest)

### junit-platform-suite-api-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-api/1.13.4/7e29167859b8b66ae9bc60f63f33202b1c8b77e3/junit-platform-suite-api-1.13.4.jar
MD5: 53ff3dfddb5bc864217e7442ca0a8243
SHA1: 7e29167859b8b66ae9bc60f63f33202b1c8b77e3
SHA256:9a05bf77e128371f5b3e25ffc89f7af467a9f68dd365fdfced469ebcf533abc9
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-api-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-api | High
Vendor | gradle | artifactid | junit-platform-suite-api | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | api | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-api | High
Product | gradle | artifactid | junit-platform-suite-api | Highest
Product | jar | package name | api | Highest
Product | jar | package name | api | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite API | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-api | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-api | High
Product | Manifest | specification-title | junit-platform-suite-api | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-api@1.13.4 (Confidence:Highest)

### junit-platform-suite-commons-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-commons/1.13.4/65f946a08a21ddecb266dd3010977111bbc84043/junit-platform-suite-commons-1.13.4.jar
MD5: ecab6fa371485191490729865ca59fba
SHA1: 65f946a08a21ddecb266dd3010977111bbc84043
SHA256:e7dacfcfa3bc692c0a7a413cefd5f51ae420415a14d39091bdf88aebfdba70b6
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-commons-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-commons | High
Vendor | gradle | artifactid | junit-platform-suite-commons | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-commons | High
Product | gradle | artifactid | junit-platform-suite-commons | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | commons | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Commons | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-commons | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-commons | High
Product | Manifest | specification-title | junit-platform-suite-commons | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-commons@1.13.4 (Confidence:Highest)

### junit-platform-suite-engine-1.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.platform/junit-platform-suite-engine/1.13.4/b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca/junit-platform-suite-engine-1.13.4.jar
MD5: 69e03866f05f55ea65268adc36fa3fc0
SHA1: b888a7a9e00b25cc19b4d45dbd4dcfe0b3a4f6ca
SHA256:3b34fd8172d70d0d7c59155e487bd8e77d43bdbfdcfe1d78c2b4eea55e9acb92
Referenced In Project/Scope: standalone:inetPlugin
junit-platform-suite-engine-1.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-platform-suite-engine | High
Vendor | gradle | artifactid | junit-platform-suite-engine | Highest
Vendor | gradle | groupid | org.junit.platform | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | platform | Highest
Vendor | jar | package name | platform | Low
Vendor | jar | package name | suite | Highest
Vendor | jar | package name | suite | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-platform-suite-engine | High
Product | gradle | artifactid | junit-platform-suite-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | platform | Highest
Product | jar | package name | platform | Low
Product | jar | package name | suite | Highest
Product | jar | package name | suite | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Platform Suite Engine | Medium
Product | Manifest | bundle-symbolicname | junit-platform-suite-engine | Medium
Product | Manifest | Implementation-Title | junit-platform-suite-engine | High
Product | Manifest | specification-title | junit-platform-suite-engine | Medium
Version | file | version | 1.13.4 | High
Version | Manifest | Implementation-Version | 1.13.4 | High

#### Identifiers

- pkg:maven/org.junit.platform/junit-platform-suite-engine@1.13.4 (Confidence:Highest)

### junit-vintage-engine-5.13.4.jar

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.junit.vintage/junit-vintage-engine/5.13.4/9fa3f512a7b8de3013eb63e51623c9e73f8d0e34/junit-vintage-engine-5.13.4.jar
MD5: 77270af1c5e9ea55a3705683f261eddd
SHA1: 9fa3f512a7b8de3013eb63e51623c9e73f8d0e34
SHA256:066b702d850ebcde36f2a8181b46a2f0f1416129d1dc63c3a1e1531006e74739
Referenced In Project/Scope: standalone:inetPlugin
junit-vintage-engine-5.13.4.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/pdfc/standalone@25.10
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | junit-vintage-engine | High
Vendor | gradle | artifactid | junit-vintage-engine | Highest
Vendor | gradle | groupid | org.junit.vintage | Highest
Vendor | jar | package name | engine | Highest
Vendor | jar | package name | engine | Low
Vendor | jar | package name | junit | Highest
Vendor | jar | package name | junit | Low
Vendor | jar | package name | vintage | Highest
Vendor | jar | package name | vintage | Low
Vendor | Manifest | build-date | 2025-07-21 | Low
Vendor | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Vendor | Manifest | build-time | 08:57:57.538+0200 | Low
Vendor | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Vendor | Manifest | Implementation-Vendor | junit.org | High
Vendor | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Vendor | Manifest | specification-vendor | junit.org | Low
Product | file | name | junit-vintage-engine | High
Product | gradle | artifactid | junit-vintage-engine | Highest
Product | jar | package name | engine | Highest
Product | jar | package name | engine | Low
Product | jar | package name | junit | Highest
Product | jar | package name | vintage | Highest
Product | jar | package name | vintage | Low
Product | Manifest | build-date | 2025-07-21 | Low
Product | Manifest | build-revision | 8a21048605e61dc388c1c83cbecf9dd5097a595d | Low
Product | Manifest | build-time | 08:57:57.538+0200 | Low
Product | Manifest | Bundle-Name | JUnit Vintage Engine | Medium
Product | Manifest | bundle-symbolicname | junit-vintage-engine | Medium
Product | Manifest | Implementation-Title | junit-vintage-engine | High
Product | Manifest | provide-capability | org.junit.platform.engine;org.junit.platform.engine=junit-vintage;version:Version="5.13.4" | Low
Product | Manifest | specification-title | junit-vintage-engine | Medium
Version | file | version | 5.13.4 | High
Version | Manifest | Implementation-Version | 5.13.4 | High

#### Identifiers

- pkg:maven/org.junit.vintage/junit-vintage-engine@5.13.4 (Confidence:Highest)

### maintenance.pdfc.zip: maintenance.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar
MD5: 2fce9b3046d06b1b3ba2706785f66c1c
SHA1: ed4cc956d3f429adf7e2181d5eb8121287310a87
SHA256:dac52eeb6c6d022f9e89d4db5f4e6c0a5a30d1c553cd0783cae21bc791e732c8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | maintenance.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugins | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | maintenance.pdfc | High
Product | jar | package name | maintenance | Highest
Product | jar | package name | maintenance | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugins | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | maintenance.pdfc | High
Product | Manifest | specification-title | maintenance.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### maintenance.pdfc.zip: maintenance.pdfc.jar: app.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/app.js
MD5: 5e534fcce6f689d176c6f3b40fc4454f
SHA1: e5f82942adf62444636d28e904add7c61a18ea32
SHA256:d08c1c9da221cbd9c38a26e0235b0da7c3bed4ab30f504aa741d4085a42f7294
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### maintenance.pdfc.zip: maintenance.pdfc.jar: comparisons.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/maintenance.pdfc.zip/maintenance.pdfc.jar/com/inet/pdfc/plugins/maintenance/server/comparisons/js/comparisons.js
MD5: dc34a947f1122f6f845deb82b822f15c
SHA1: 7a1528b00bb5229be98689b8c465b37c39bfa0ff
SHA256:27b0ebba3a0c757e921cb562be691ee971fa06d1247423ff2c16f71d87d51bee
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### ocr.tesseract.zip: commons-logging.jar

Description:

    Apache Commons Logging is a thin adapter allowing configurable bridging to other,
        well-known logging systems.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/commons-logging.jar
MD5: e7a1e7cb6a89241ed9bfec4c25b6c645
SHA1: b9fc14968d63a8b8a8a2c1885fe3e90564239708
SHA256:bc2dfe32f1ef06509e6a065144c1adf7b420eabf11a87f30bd127f8faa332016
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | commons-logging | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | commons | Highest
Vendor | jar | package name | logging | Highest
Vendor | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Vendor | Manifest | build-jdk-spec | 17 | Low
Vendor | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Vendor | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | multi-release | true | Low
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | commons-logging | Low
Vendor | pom | developer email | baliuka@apache.org | Low
Vendor | pom | developer email | costin@apache.org | Low
Vendor | pom | developer email | craigmcc@apache.org | Low
Vendor | pom | developer email | dennisl@apache.org | Low
Vendor | pom | developer email | donaldp@apache.org | Low
Vendor | pom | developer email | ggregory at apache.org | Low
Vendor | pom | developer email | morgand@apache.org | Low
Vendor | pom | developer email | rdonkin@apache.org | Low
Vendor | pom | developer email | rsitze@apache.org | Low
Vendor | pom | developer email | rwaldhoff@apache.org | Low
Vendor | pom | developer email | sanders@apache.org | Low
Vendor | pom | developer email | skitching@apache.org | Low
Vendor | pom | developer email | tn@apache.org | Low
Vendor | pom | developer id | baliuka | Medium
Vendor | pom | developer id | bstansberry | Medium
Vendor | pom | developer id | costin | Medium
Vendor | pom | developer id | craigmcc | Medium
Vendor | pom | developer id | dennisl | Medium
Vendor | pom | developer id | donaldp | Medium
Vendor | pom | developer id | ggregory | Medium
Vendor | pom | developer id | morgand | Medium
Vendor | pom | developer id | rdonkin | Medium
Vendor | pom | developer id | rsitze | Medium
Vendor | pom | developer id | rwaldhoff | Medium
Vendor | pom | developer id | sanders | Medium
Vendor | pom | developer id | skitching | Medium
Vendor | pom | developer id | tn | Medium
Vendor | pom | developer name | Brian Stansberry | Medium
Vendor | pom | developer name | Costin Manolache | Medium
Vendor | pom | developer name | Craig McClanahan | Medium
Vendor | pom | developer name | Dennis Lundberg | Medium
Vendor | pom | developer name | Gary Gregory | Medium
Vendor | pom | developer name | Juozas Baliuka | Medium
Vendor | pom | developer name | Morgan Delagrange | Medium
Vendor | pom | developer name | Peter Donald | Medium
Vendor | pom | developer name | Richard Sitze | Medium
Vendor | pom | developer name | Robert Burrell Donkin | Medium
Vendor | pom | developer name | Rodney Waldhoff | Medium
Vendor | pom | developer name | Scott Sanders | Medium
Vendor | pom | developer name | Simon Kitching | Medium
Vendor | pom | developer name | Thomas Neidhart | Medium
Vendor | pom | developer org | Apache | Medium
Vendor | pom | developer org | The Apache Software Foundation | Medium
Vendor | pom | developer org URL | https://www.apache.org/ | Medium
Vendor | pom | groupid | commons-logging | Highest
Vendor | pom | name | Apache Commons Logging | High
Vendor | pom | parent-artifactid | commons-parent | Low
Vendor | pom | parent-groupid | org.apache.commons | Medium
Vendor | pom | url | https://commons.apache.org/proper/commons-logging/ | Highest
Product | file | name | commons-logging | High
Product | jar | package name | apache | Highest
Product | jar | package name | commons | Highest
Product | jar | package name | logging | Highest
Product | Manifest | automatic-module-name | org.apache.commons.logging | Medium
Product | Manifest | build-jdk-spec | 17 | Low
Product | Manifest | bundle-docurl | https://commons.apache.org/proper/commons-logging/ | Low
Product | Manifest | Bundle-Name | Apache Commons Logging | Medium
Product | Manifest | bundle-symbolicname | org.apache.commons.commons-logging | Medium
Product | Manifest | Implementation-Title | Apache Commons Logging | High
Product | Manifest | multi-release | true | Low
Product | Manifest | specification-title | Apache Commons Logging | Medium
Product | pom | artifactid | commons-logging | Highest
Product | pom | developer email | baliuka@apache.org | Low
Product | pom | developer email | costin@apache.org | Low
Product | pom | developer email | craigmcc@apache.org | Low
Product | pom | developer email | dennisl@apache.org | Low
Product | pom | developer email | donaldp@apache.org | Low
Product | pom | developer email | ggregory at apache.org | Low
Product | pom | developer email | morgand@apache.org | Low
Product | pom | developer email | rdonkin@apache.org | Low
Product | pom | developer email | rsitze@apache.org | Low
Product | pom | developer email | rwaldhoff@apache.org | Low
Product | pom | developer email | sanders@apache.org | Low
Product | pom | developer email | skitching@apache.org | Low
Product | pom | developer email | tn@apache.org | Low
Product | pom | developer id | baliuka | Low
Product | pom | developer id | bstansberry | Low
Product | pom | developer id | costin | Low
Product | pom | developer id | craigmcc | Low
Product | pom | developer id | dennisl | Low
Product | pom | developer id | donaldp | Low
Product | pom | developer id | ggregory | Low
Product | pom | developer id | morgand | Low
Product | pom | developer id | rdonkin | Low
Product | pom | developer id | rsitze | Low
Product | pom | developer id | rwaldhoff | Low
Product | pom | developer id | sanders | Low
Product | pom | developer id | skitching | Low
Product | pom | developer id | tn | Low
Product | pom | developer name | Brian Stansberry | Low
Product | pom | developer name | Costin Manolache | Low
Product | pom | developer name | Craig McClanahan | Low
Product | pom | developer name | Dennis Lundberg | Low
Product | pom | developer name | Gary Gregory | Low
Product | pom | developer name | Juozas Baliuka | Low
Product | pom | developer name | Morgan Delagrange | Low
Product | pom | developer name | Peter Donald | Low
Product | pom | developer name | Richard Sitze | Low
Product | pom | developer name | Robert Burrell Donkin | Low
Product | pom | developer name | Rodney Waldhoff | Low
Product | pom | developer name | Scott Sanders | Low
Product | pom | developer name | Simon Kitching | Low
Product | pom | developer name | Thomas Neidhart | Low
Product | pom | developer org | Apache | Low
Product | pom | developer org | The Apache Software Foundation | Low
Product | pom | developer org URL | https://www.apache.org/ | Low
Product | pom | groupid | commons-logging | Highest
Product | pom | name | Apache Commons Logging | High
Product | pom | parent-artifactid | commons-parent | Medium
Product | pom | parent-groupid | org.apache.commons | Medium
Product | pom | url | https://commons.apache.org/proper/commons-logging/ | Medium
Version | Manifest | Bundle-Version | 1.3.4 | High
Version | Manifest | Implementation-Version | 1.3.4 | High
Version | pom | parent-version | 1.3.4 | Low
Version | pom | version | 1.3.4 | Highest

#### Identifiers

- pkg:maven/commons-logging/commons-logging@1.3.4 (Confidence:High)

### ocr.tesseract.zip: fontbox.jar

Description:

        The Apache FontBox library is an open source Java tool to obtain low level information
        from font files. FontBox is a subproject of Apache PDFBox.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/fontbox.jar
MD5: 76fe707f08787cd215f287da48ed7e1b
SHA1: b4a068e1dba2b9832a108cdf6e9a3249680e3ce8
SHA256:e8a62be2df27a0d44191b6669c0b18df6efe5271232db8dcb8745d5d9774755b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | fontbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | fontbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.fontbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | fontbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache FontBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Vendor | pom | url | http://pdfbox.apache.org/ | Highest
Product | file | name | fontbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | fontbox | Highest
Product | Manifest | automatic-module-name | org.apache.fontbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache FontBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox.fontbox | Medium
Product | Manifest | Implementation-Title | Apache FontBox | High
Product | Manifest | specification-title | Apache FontBox | Medium
Product | pom | artifactid | fontbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache FontBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Product | pom | url | http://pdfbox.apache.org/ | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/fontbox@3.0.5 (Confidence:High)

### ocr.tesseract.zip: jai-imageio-core.jar

Description:

        Java Advanced Imaging Image I/O Tools API core, but without the classes
        involved with javax.media.jai dependencies, JPEG2000 or
        codecLibJIIO, meaning that this library can be distributed under the
        modified BSD license and should be GPL compatible.

License:

    BSD 3-clause License w/nuclear disclaimer: LICENSE.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jai-imageio-core.jar
MD5: 6978d733bfb55c0a82639f724fe5f3bb
SHA1: fb6d79b929556362a241b2f65a04e538062f0077
SHA256:8ad3c68e9efffb10ac87ff8bc589adf64b04a729c5194c079efd0643607fd72a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jai-imageio-core | High
Vendor | jar | package name | github | Highest
Vendor | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Vendor | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Vendor | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Vendor | Manifest | Implementation-Vendor | https://github.com/jai-imageio/ jai-imageio GitHub group | High
Vendor | Manifest | specification-vendor | Sun Microsystems, Inc. | Low
Vendor | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Vendor | pom | artifactid | jai-imageio-core | Low
Vendor | pom | developer email | stian@s11.no | Low
Vendor | pom | developer name | Stian Soiland-Reyes | Medium
Vendor | pom | developer org | s11 | Medium
Vendor | pom | developer org URL | http://s11.no/ | Medium
Vendor | pom | groupid | com.github.jai-imageio | Highest
Vendor | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Vendor | pom | organization name | jai-imageio GitHub group | High
Vendor | pom | organization url | jai-imageio/ | Medium
Vendor | pom | url | jai-imageio/jai-imageio-core | Highest
Product | file | name | jai-imageio-core | High
Product | jar | package name | github | Highest
Product | Manifest | bundle-docurl | https://github.com/jai-imageio/ | Low
Product | Manifest | Bundle-Name | Java Advanced Imaging Image I/O Tools API core (standalone) | Medium
Product | Manifest | bundle-symbolicname | jai-imageio-core | Medium
Product | Manifest | extension-name | com.github.jai-imageio-jai-imageio-core | Medium
Product | Manifest | Implementation-Title | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | Manifest | specification-title | Java Advanced Imaging | Medium
Product | Manifest | url | https://github.com/jai-imageio/jai-imageio-core | Low
Product | pom | artifactid | jai-imageio-core | Highest
Product | pom | developer email | stian@s11.no | Low
Product | pom | developer name | Stian Soiland-Reyes | Low
Product | pom | developer org | s11 | Low
Product | pom | developer org URL | http://s11.no/ | Low
Product | pom | groupid | com.github.jai-imageio | Highest
Product | pom | name | Java Advanced Imaging Image I/O Tools API core (standalone) | High
Product | pom | organization name | jai-imageio GitHub group | Low
Product | pom | url | jai-imageio/ | High
Product | pom | url | jai-imageio/jai-imageio-core | High
Version | Manifest | Bundle-Version | 1.4.0 | High
Version | Manifest | Implementation-Version | 1.4.0 | High
Version | pom | version | 1.4.0 | Highest

#### Identifiers

- pkg:maven/com.github.jai-imageio/jai-imageio-core@1.4.0 (Confidence:High)

### ocr.tesseract.zip: jbig2-imageio.jar

Description:

    	Java Image I/O plugin for reading JBIG2-compressed image data.
    	Formerly known as the levigo JBig2 ImageIO plugin (com.levigo.jbig2:levigo-jbig2-imageio).

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jbig2-imageio.jar
MD5: c51f45dc3d29bbf716774f9ff9e95ad6
SHA1: ad09a9bb94ea791ea81fb6c5bc2b13dd77872598
SHA256:29cb2951622f10acf61fd0656c4e6fa5562194a9095f7a1d26aa426e2f6b17eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jbig2-imageio | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | image | Highest
Vendor | jar | package name | jbig2 | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Vendor | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | Implementation-Vendor-Id | org.apache.pdfbox | Medium
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | jbig2-imageio | Low
Vendor | pom | developer id | adam | Medium
Vendor | pom | developer id | blitchfield | Medium
Vendor | pom | developer id | carrier | Medium
Vendor | pom | developer id | danielwilson | Medium
Vendor | pom | developer id | gbailleul | Medium
Vendor | pom | developer id | hennejg | Medium
Vendor | pom | developer id | holdersn | Medium
Vendor | pom | developer id | jahewson | Medium
Vendor | pom | developer id | jeremias | Medium
Vendor | pom | developer id | jukka | Medium
Vendor | pom | developer id | kjackson | Medium
Vendor | pom | developer id | koch | Medium
Vendor | pom | developer id | koehlecn | Medium
Vendor | pom | developer id | lehmi | Medium
Vendor | pom | developer id | leleueri | Medium
Vendor | pom | developer id | mmayer | Medium
Vendor | pom | developer id | msayhoun | Medium
Vendor | pom | developer id | pkoch | Medium
Vendor | pom | developer id | tallison | Medium
Vendor | pom | developer id | tboehme | Medium
Vendor | pom | developer id | tchojecki | Medium
Vendor | pom | developer id | tilman | Medium
Vendor | pom | developer id | vfed | Medium
Vendor | pom | developer name | Adam Nichols | Medium
Vendor | pom | developer name | Andreas Lehmkühler | Medium
Vendor | pom | developer name | Ben Litchfield | Medium
Vendor | pom | developer name | Brian Carrier | Medium
Vendor | pom | developer name | Carolin Köhler | Medium
Vendor | pom | developer name | Daniel Wilson | Medium
Vendor | pom | developer name | Eric Leleu | Medium
Vendor | pom | developer name | Guillaume Bailleul | Medium
Vendor | pom | developer name | Jeremias Maerki | Medium
Vendor | pom | developer name | Johannes Koch | Medium
Vendor | pom | developer name | John Hewson | Medium
Vendor | pom | developer name | Jukka Zitting | Medium
Vendor | pom | developer name | Jörg Henne | Medium
Vendor | pom | developer name | Kevin Jackson | Medium
Vendor | pom | developer name | Maruan Sayhoun | Medium
Vendor | pom | developer name | Matthäus Mayer | Medium
Vendor | pom | developer name | Phillipp Koch | Medium
Vendor | pom | developer name | Sebastian Holder | Medium
Vendor | pom | developer name | Thomas Chojecki | Medium
Vendor | pom | developer name | Tilman Hausherr | Medium
Vendor | pom | developer name | Tim Allison | Medium
Vendor | pom | developer name | Timo Boehme | Medium
Vendor | pom | developer name | Villu Ruusmann | Medium
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | PDFBox JBIG2 ImageIO plugin | High
Vendor | pom | organization name | The Apache Software Foundation | High
Vendor | pom | organization url | http://pdfbox.apache.org | Medium
Vendor | pom | parent-artifactid | apache | Low
Vendor | pom | parent-groupid | org.apache | Medium
Product | file | name | jbig2-imageio | High
Product | jar | package name | apache | Highest
Product | jar | package name | image | Highest
Product | jar | package name | jbig2 | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox.jbig2 | Medium
Product | Manifest | Implementation-Title | PDFBox JBIG2 ImageIO plugin | High
Product | Manifest | implementation-url | https://www.apache.org/jbig2-imageio/ | Low
Product | Manifest | specification-title | PDFBox JBIG2 ImageIO plugin | Medium
Product | pom | artifactid | jbig2-imageio | Highest
Product | pom | developer id | adam | Low
Product | pom | developer id | blitchfield | Low
Product | pom | developer id | carrier | Low
Product | pom | developer id | danielwilson | Low
Product | pom | developer id | gbailleul | Low
Product | pom | developer id | hennejg | Low
Product | pom | developer id | holdersn | Low
Product | pom | developer id | jahewson | Low
Product | pom | developer id | jeremias | Low
Product | pom | developer id | jukka | Low
Product | pom | developer id | kjackson | Low
Product | pom | developer id | koch | Low
Product | pom | developer id | koehlecn | Low
Product | pom | developer id | lehmi | Low
Product | pom | developer id | leleueri | Low
Product | pom | developer id | mmayer | Low
Product | pom | developer id | msayhoun | Low
Product | pom | developer id | pkoch | Low
Product | pom | developer id | tallison | Low
Product | pom | developer id | tboehme | Low
Product | pom | developer id | tchojecki | Low
Product | pom | developer id | tilman | Low
Product | pom | developer id | vfed | Low
Product | pom | developer name | Adam Nichols | Low
Product | pom | developer name | Andreas Lehmkühler | Low
Product | pom | developer name | Ben Litchfield | Low
Product | pom | developer name | Brian Carrier | Low
Product | pom | developer name | Carolin Köhler | Low
Product | pom | developer name | Daniel Wilson | Low
Product | pom | developer name | Eric Leleu | Low
Product | pom | developer name | Guillaume Bailleul | Low
Product | pom | developer name | Jeremias Maerki | Low
Product | pom | developer name | Johannes Koch | Low
Product | pom | developer name | John Hewson | Low
Product | pom | developer name | Jukka Zitting | Low
Product | pom | developer name | Jörg Henne | Low
Product | pom | developer name | Kevin Jackson | Low
Product | pom | developer name | Maruan Sayhoun | Low
Product | pom | developer name | Matthäus Mayer | Low
Product | pom | developer name | Phillipp Koch | Low
Product | pom | developer name | Sebastian Holder | Low
Product | pom | developer name | Thomas Chojecki | Low
Product | pom | developer name | Tilman Hausherr | Low
Product | pom | developer name | Tim Allison | Low
Product | pom | developer name | Timo Boehme | Low
Product | pom | developer name | Villu Ruusmann | Low
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | PDFBox JBIG2 ImageIO plugin | High
Product | pom | organization name | The Apache Software Foundation | Low
Product | pom | organization url | http://pdfbox.apache.org | Low
Product | pom | parent-artifactid | apache | Medium
Product | pom | parent-groupid | org.apache | Medium
Version | Manifest | Implementation-Version | 3.0.4 | High
Version | pom | parent-version | 3.0.4 | Low
Version | pom | version | 3.0.4 | Highest

#### Identifiers

- pkg:maven/org.apache.pdfbox/jbig2-imageio@3.0.4 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.4:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: jboss-vfs.jar

Description:

    A VFS library

License:

    Apache License 2.0: http://repository.jboss.org/licenses/apache-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jboss-vfs.jar
MD5: ecf3234794d1b7d03dc1eb5380328e04
SHA1: 748b9f156f35bf63ead9887f040cfc48af18f7f0
SHA256:33a84eac3f1027551146247e3ef4057dc8840cfc8cd436cb2f925b6f5d2126e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jboss-vfs | High
Vendor | jar | package name | jboss | Highest
Vendor | jar | package name | vfs | Highest
Vendor | Manifest | automatic-module-name | org.jboss.vfs | Medium
Vendor | Manifest | build-jdk-spec | 11 | Low
Vendor | Manifest | implementation-url | http://www.jboss.org | Low
Vendor | Manifest | Implementation-Vendor | JBoss, A division of Red Hat, Inc | High
Vendor | Manifest | specification-vendor | JBoss, A division of Red Hat, Inc | Low
Vendor | pom | artifactid | jboss-vfs | Low
Vendor | pom | groupid | org.jboss | Highest
Vendor | pom | name | JBoss VFS | High
Vendor | pom | organization name | JBoss, A division of Red Hat, Inc | High
Vendor | pom | organization url | http://www.jboss.org | Medium
Vendor | pom | parent-artifactid | jboss-parent | Low
Vendor | pom | url | http://www.jboss.org | Highest
Product | file | name | jboss-vfs | High
Product | jar | package name | jboss | Highest
Product | jar | package name | vfs | Highest
Product | Manifest | automatic-module-name | org.jboss.vfs | Medium
Product | Manifest | build-jdk-spec | 11 | Low
Product | Manifest | Implementation-Title | JBoss VFS | High
Product | Manifest | implementation-url | http://www.jboss.org | Low
Product | Manifest | specification-title | JBoss VFS | Medium
Product | pom | artifactid | jboss-vfs | Highest
Product | pom | groupid | org.jboss | Highest
Product | pom | name | JBoss VFS | High
Product | pom | organization name | JBoss, A division of Red Hat, Inc | Low
Product | pom | organization url | http://www.jboss.org | Low
Product | pom | parent-artifactid | jboss-parent | Medium
Product | pom | url | http://www.jboss.org | Medium
Version | Manifest | Implementation-Version | 3.3.2.Final | High
Version | pom | parent-version | 3.3.2.Final | Low
Version | pom | version | 3.3.2.Final | Highest

#### Identifiers

- pkg:maven/org.jboss/jboss-vfs@3.3.2.Final (Confidence:High)

### ocr.tesseract.zip: jna.jar

Description:

    JNA Library

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar
MD5: 9bb1338e58031463c300f643cb3c41fa
SHA1: d9c6794f22c2e3c846b02d51c6a95c304e8e056b
SHA256:336f2ae25222389eb9f3c90f8f7c3a6258c33581964b2338bf836b3b865b049e
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jna | High
Vendor | jar | package name | jna | Highest
Vendor | jar | package name | jna | Low
Vendor | jar | package name | sun | Highest
Vendor | jar | package name | sun | Low
Vendor | jar (hint) | package name | oracle | Highest
Vendor | jar (hint) | package name | oracle | Low
Vendor | Manifest | automatic-module-name | com.sun.jna | Medium
Vendor | Manifest | bundle-activationpolicy | lazy | Low
Vendor | Manifest | bundle-category | jni | Low
Vendor | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Vendor | Manifest | bundle-symbolicname | com.sun.jna | Medium
Vendor | Manifest | Implementation-Vendor | JNA Development Team | High
Vendor | Manifest | specification-vendor | JNA Development Team | Low
Product | file | name | jna | High
Product | jar | package name | jna | Highest
Product | jar | package name | jna | Low
Product | jar | package name | library | Highest
Product | jar | package name | native | Highest
Product | jar | package name | sun | Highest
Product | jar | package name | win32 | Highest
Product | Manifest | automatic-module-name | com.sun.jna | Medium
Product | Manifest | bundle-activationpolicy | lazy | Low
Product | Manifest | bundle-category | jni | Low
Product | Manifest | Bundle-Name | jna | Medium
Product | Manifest | bundle-nativecode | com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win32, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win32, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win32, com/sun/jna/win32-x86/jnidispatch.dll; processor=x86;osname=win, com/sun/jna/win32-x86-64/jnidispatch.dll; processor=x86-64;osname=win, com/sun/jna/win32-aarch64/jnidispatch.dll; processor=aarch64;osname=win, com/sun/jna/w32ce-arm/jnidispatch.dll; processor=arm;osname=wince, com/sun/jna/sunos-x86/libjnidispatch.so; processor=x86;osname=sunos, com/sun/jna/sunos-x86-64/libjnidispatch.so; processor=x86-64;osname=sunos, com/sun/jna/sunos-sparc/libjnidispatch.so; processor=sparc;osname=sunos, com/sun/jna/sunos-sparcv9/libjnidispatch.so; processor=sparcv9;osname=sunos, com/sun/jna/aix-ppc/libjnidispatch.a; processor=ppc;osname=aix, com/sun/jna/aix-ppc64/libjnidispatch.a; processor=ppc64;osname=aix, com/sun/jna/linux-ppc/libjnidispatch.so; processor=ppc;osname=linux, com/sun/jna/linux-ppc64/libjnidispatch.so; processor=ppc64;osname=linux, com/sun/jna/linux-ppc64le/libjnidispatch.so; processor=ppc64le;osname=linux, com/sun/jna/linux-x86/libjnidispatch.so; processor=x86;osname=linux, com/sun/jna/linux-x86-64/libjnidispatch.so; processor=x86-64;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm;osname=linux, com/sun/jna/linux-arm/libjnidispatch.so; processor=arm_le;osname=linux, com/sun/jna/linux-armel/libjnidispatch.so; processor=armel;osname=linux, com/sun/jna/linux-aarch64/libjnidispatch.so; processor=aarch64;osname=linux, com/sun/jna/linux-ia64/libjnidispatch.so; processor=ia64;osname=linux, com/sun/jna/linux-sparcv9/libjnidispatch.so; processor=sparcv9;osname=linux, com/sun/jna/linux-mips64el/libjnidispatch.so; processor=mips64el;osname=linux, com/sun/jna/linux-s390x/libjnidispatch.so; processor=S390x;osname=linux, com/sun/jna/linux-loongarch64/libjnidispatch.so; processor=loongarch64;osname=linux, com/sun/jna/freebsd-x86/libjnidispatch.so; processor=x86;osname=freebsd, com/sun/jna/freebsd-x86-64/libjnidispatch.so; processor=x86-64;osname=freebsd, com/sun/jna/openbsd-x86/libjnidispatch.so; processor=x86;osname=openbsd, com/sun/jna/openbsd-x86-64/libjnidispatch.so; processor=x86-64;osname=openbsd, com/sun/jna/darwin-ppc/libjnidispatch.jnilib; osname=macosx;processor=ppc, com/sun/jna/darwin-ppc64/libjnidispatch.jnilib; osname=macosx;processor=ppc64, com/sun/jna/darwin-x86/libjnidispatch.jnilib; osname=macosx;processor=x86, com/sun/jna/darwin-x86-64/libjnidispatch.jnilib; osname=macosx;processor=x86-64, com/sun/jna/darwin-aarch64/libjnidispatch.jnilib; osname=macosx;processor=aarch64 | Low
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.6 | Low
Product | Manifest | bundle-symbolicname | com.sun.jna | Medium
Product | Manifest | Implementation-Title | com.sun.jna | High
Product | Manifest | specification-title | Java Native Access (JNA) | Medium
Version | jar | package name | jna | Highest
Version | jar | package name | sun | Highest
Version | jar | package name | win32 | Highest
Version | Manifest | Bundle-Version | 5.14.0 | High
Version | Manifest | Implementation-Version | 5.14.0 (b0) | High

#### Identifiers

- cpe:2.3:a:oracle:java_se:5.14.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-aarch64/jnidispatch.dll
MD5: f6bef568e690d361a5dcc165f5ad4b1f
SHA1: 05638a4aaafa689a6c246530823afdc18d3fd438
SHA256:b9d1479b9619b7ece4a36b6ae31365ffaf15a1355d4f6da02f8b5f09df2fa82f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86-64/jnidispatch.dll
MD5: 719d6ba1946c25aa61ce82f90d77ffd5
SHA1: 94d2191378cac5719daecc826fc116816284c406
SHA256:69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: jna.jar: jnidispatch.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/jna.jar/com/sun/jna/win32-x86/jnidispatch.dll
MD5: e15183ef9c6c255b76fda73d01ca7ecb
SHA1: f816f998c43204230d9ea3eecffb5f8372a32c2e
SHA256:38650a0612730c52580c9f32ff766b44b1c5a426d52e7dd7a53687bf3389ac2c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jnidispatch | High
Product | file | name | jnidispatch | High

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar

Description:

            # Lept4J

            ## Description:

            A Java JNA wrapper for Leptonica Image Processing library.

            Lept4J is released and distributed under the Apache License, v2.0.

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar
MD5: 70889e28b7569dd54e7da9ced01dabdf
SHA1: ec69d554f05e030b5e06295a4d39057634759549
SHA256:5feb69a8fc9550809b23cb980270cdf99368dea330ba7d98789e2dc93f8bef6f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | lept4j | High
Vendor | jar | package name | lept4j | Highest
Vendor | jar | package name | leptonica | Highest
Vendor | jar | package name | net | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | pom | artifactid | lept4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.lept4j | Highest
Vendor | pom | name | Lept4J - Leptonica for Java | High
Vendor | pom | url | nguyenq/lept4j | Highest
Product | file | name | lept4j | High
Product | jar | package name | lept4j | Highest
Product | jar | package name | leptonica | Highest
Product | jar | package name | net | Highest
Product | jar | package name | sourceforge | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | pom | artifactid | lept4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.lept4j | Highest
Product | pom | name | Lept4J - Leptonica for Java | High
Product | pom | url | nguyenq/lept4j | High
Version | pom | version | 1.19.1 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.lept4j/lept4j@1.19.1 (Confidence:High)

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86-64/libleptonica1841.dll
MD5: 981b8e38e33018fff693c8e3ec0f2254
SHA1: 91a9cd0a874d614bc8a8946d2e0a8573e8b96ac1
SHA256:0b2cb584baeb38b90033344b4d70830b33ba01396fb9142b9b733e83c8a73fb8
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: lept4j.jar: libleptonica1841.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/lept4j.jar/win32-x86/libleptonica1841.dll
MD5: 64f0634192bcf75ade5ea06f8119512d
SHA1: b387acaa5209f796fb3065395548d2adcbad620e
SHA256:405e5263b72cb7d63c723fd85a124201cd66aa9a983b3a1c1e4c82003c91bcaa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libleptonica1841 | High
Product | file | name | libleptonica1841 | High
Version | file | name | libleptonica1841 | Medium
Version | file | version | 1841 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: ocr.tesseract.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/ocr.tesseract.jar
MD5: 4f0b8d4809b232aa2021c26d6bef01cf
SHA1: 64dfea66c7d1c3b638d660da7618f8100006b94a
SHA256:df7d3c8b1da9340ae6554d68ac01d3c9037ad5f81bf44e795d5361660a221368
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | ocr.tesseract | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | ocr | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | ocr.tesseract | High
Product | jar | package name | ocr | Highest
Product | jar | package name | ocr | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | tesseract | Highest
Product | jar | package name | tesseract | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | ocr.tesseract | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | ocr.tesseract | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:tesseract_ocr_project:tesseract_ocr:25.10.198:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:tesseract_project:tesseract:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: pdfbox.jar

Description:

            The Apache PDFBox library is an open source Java tool for working with PDF documents.

License:

    https://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox.jar
MD5: f6ae0d983002caad75515488a3091dab
SHA1: c34109061c3a0d85d871d9edc469ac0682f81856
SHA256:f0e5d3a1e573c707e4fbcc2ee8e42ea8ca1d5261bdcb3a05a08d2118553c1e5a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfbox | High
Vendor | jar | package name | apache | Highest
Vendor | jar | package name | pdfbox | Highest
Vendor | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Vendor | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Vendor | Manifest | Implementation-Vendor | The Apache Software Foundation | High
Vendor | Manifest | specification-vendor | The Apache Software Foundation | Low
Vendor | pom | artifactid | pdfbox | Low
Vendor | pom | groupid | org.apache.pdfbox | Highest
Vendor | pom | name | Apache PDFBox | High
Vendor | pom | parent-artifactid | pdfbox-parent | Low
Product | file | name | pdfbox | High
Product | jar | package name | apache | Highest
Product | jar | package name | pdfbox | Highest
Product | Manifest | automatic-module-name | org.apache.pdfbox | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-docurl | https://pdfbox.apache.org | Low
Product | Manifest | Bundle-Name | Apache PDFBox | Medium
Product | Manifest | bundle-symbolicname | org.apache.pdfbox | Medium
Product | Manifest | Implementation-Title | Apache PDFBox | High
Product | Manifest | specification-title | Apache PDFBox | Medium
Product | pom | artifactid | pdfbox | Highest
Product | pom | groupid | org.apache.pdfbox | Highest
Product | pom | name | Apache PDFBox | High
Product | pom | parent-artifactid | pdfbox-parent | Medium
Version | Manifest | Bundle-Version | 3.0.5 | High
Version | Manifest | Implementation-Version | 3.0.5 | High
Version | pom | version | 3.0.5 | Highest

#### Related Dependencies

- ocr.tesseract.zip: pdfbox-debugger.jar
  - File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/pdfbox-debugger.jar
  - MD5: d55d7e2d0ad7790c653e4ea136faa569
  - SHA1: 750d08a268dc586f71fb6d8af484b07be9372eb3
  - SHA256: 39719096b2af98c856ec083f0818938e8ab18ec2be85a2a525e46a65b36f570d
  - pkg:maven/org.apache.pdfbox/pdfbox-debugger@3.0.5

#### Identifiers

- pkg:maven/org.apache.pdfbox/pdfbox@3.0.5 (Confidence:High)
- cpe:2.3:a:apache:pdfbox:3.0.5:*:*:*:*:*:*:* (Confidence:Highest)

### ocr.tesseract.zip: tess4j.jar

Description:

            # Tess4J

            ## Description:

            A Java JNA wrapper for Tesseract OCR API.

            Tess4J is released and distributed under the Apache License, v2.0.

            ## Features:

            The library provides optical character recognition (OCR) support for:

            TIFF, JPEG, GIF, PNG, and BMP image formats
            Multi-page TIFF images
            PDF document format

License:

    Apache License 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar
MD5: f6a0f08fbc08771303e5cb8dffbc949a
SHA1: 851d6f93d97a155d8831736ad1031a539946014e
SHA256:e65bcc6328ab575684038d45e1891fa48e0d8255097a628baee0d8cfeb5ea816
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | tess4j | High
Vendor | jar | package name | net | Highest
Vendor | jar | package name | recognition | Highest
Vendor | jar | package name | sourceforge | Highest
Vendor | jar | package name | tess4j | Highest
Vendor | jar | package name | tesseract | Highest
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Vendor | Manifest | Implementation-Vendor | Tess4J | High
Vendor | Manifest | specification-vendor | Tess4J | Low
Vendor | pom | artifactid | tess4j | Low
Vendor | pom | developer email | nguyenq@users.sf.net | Low
Vendor | pom | developer email | osoriojaques@gmail.com | Low
Vendor | pom | developer name | O.J. Sousa Rodrigues | Medium
Vendor | pom | developer name | Quan Nguyen | Medium
Vendor | pom | groupid | net.sourceforge.tess4j | Highest
Vendor | pom | name | Tess4J - Tesseract for Java | High
Vendor | pom | organization name | Tess4J | High
Vendor | pom | organization url | http://tess4j.sourceforge.net | Medium
Vendor | pom | url | http://tess4j.sourceforge.net | Highest
Product | file | name | tess4j | High
Product | jar | package name | net | Highest
Product | jar | package name | recognition | Highest
Product | jar | package name | sourceforge | Highest
Product | jar | package name | tess4j | Highest
Product | jar | package name | tesseract | Highest
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | Implementation-Title | Tess4J - Tesseract for Java | High
Product | Manifest | implementation-url | http://tess4j.sourceforge.net | Low
Product | Manifest | specification-title | Tess4J - Tesseract for Java | Medium
Product | pom | artifactid | tess4j | Highest
Product | pom | developer email | nguyenq@users.sf.net | Low
Product | pom | developer email | osoriojaques@gmail.com | Low
Product | pom | developer name | O.J. Sousa Rodrigues | Low
Product | pom | developer name | Quan Nguyen | Low
Product | pom | groupid | net.sourceforge.tess4j | Highest
Product | pom | name | Tess4J - Tesseract for Java | High
Product | pom | organization name | Tess4J | Low
Product | pom | organization url | http://tess4j.sourceforge.net | Low
Product | pom | url | http://tess4j.sourceforge.net | Medium
Version | Manifest | Implementation-Version | 5.12.0 | High
Version | pom | version | 5.12.0 | Highest

#### Identifiers

- pkg:maven/net.sourceforge.tess4j/tess4j@5.12.0 (Confidence:High)
- cpe:2.3:a:tesseract_project:tesseract:5.12.0:*:*:*:*:*:*:* (Confidence:Low)

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86-64/libtesseract541.dll
MD5: 1246c1e50200dc43722e926e28fc7c03
SHA1: d8a78040e9c7c71ccaeb627b73c41c66a18b5157
SHA256:8180efb176e09b7218144fe69d84c0cf6b6187e20d8529f1138bd77396d6f4fa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### ocr.tesseract.zip: tess4j.jar: libtesseract541.dll

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/ocr.tesseract.zip/tess4j.jar/win32-x86/libtesseract541.dll
MD5: cbf57c8eb12e95512e67638f344ae537
SHA1: 5531d539121fd0aa57d11febd2e8b2a5c13fca05
SHA256:d4d1843d9efeeec1ca53c4ebe6d39e22e5bf17f5bee8b9eedb3bcef7c3c8c84d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | libtesseract541 | High
Product | file | name | libtesseract541 | High
Version | file | name | libtesseract541 | Medium
Version | file | version | 541 | Medium

#### Identifiers

- None

### opentest4j-1.3.0.jar

License:

    The Apache License, Version 2.0

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.opentest4j/opentest4j/1.3.0/152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256:48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Project/Scope: standalone:inetPlugin
opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items.Included by:

- pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.13.4
- pkg:maven/org.junit.platform/junit-platform-suite@1.13.4
- pkg:maven/org.junit.jupiter/junit-jupiter@5.13.4

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | opentest4j | High
Vendor | gradle | artifactid | opentest4j | Highest
Vendor | gradle | groupid | org.opentest4j | Highest
Vendor | jar | package name | opentest4j | Highest
Vendor | jar | package name | opentest4j | Low
Vendor | Manifest | build-date | 2023-07-06 | Low
Vendor | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Vendor | Manifest | build-time | 14:25:06.116+0200 | Low
Vendor | Manifest | bundle-symbolicname | org.opentest4j | Medium
Vendor | Manifest | Implementation-Vendor | opentest4j.org | High
Vendor | Manifest | specification-vendor | opentest4j.org | Low
Product | file | name | opentest4j | High
Product | gradle | artifactid | opentest4j | Highest
Product | jar | package name | opentest4j | Highest
Product | Manifest | build-date | 2023-07-06 | Low
Product | Manifest | build-revision | 214973bfa4e7e9be7d04e623202cc4147c7036d2 | Low
Product | Manifest | build-time | 14:25:06.116+0200 | Low
Product | Manifest | Bundle-Name | opentest4j | Medium
Product | Manifest | bundle-symbolicname | org.opentest4j | Medium
Product | Manifest | Implementation-Title | opentest4j | High
Product | Manifest | specification-title | opentest4j | Medium
Version | file | version | 1.3.0 | High
Version | Manifest | Implementation-Version | 1.3.0 | High

#### Identifiers

- pkg:maven/org.opentest4j/opentest4j@1.3.0 (Confidence:Highest)

### parser.image.zip: parser.image.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.image.zip/parser.image.jar
MD5: 5ab31880f6d9e03d65494673678d9a2a
SHA1: d7bdb05dff7fb82819315160f7099c496e56cb51
SHA256:cbd130c20875a6cc119438ddec3fa705b485a452664a7052804c10816133f49b
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.image | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.image | High
Product | jar | package name | imageparser | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.image | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.image | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### parser.pdf.config.zip: parser.pdf.config.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.pdf.config.zip/parser.pdf.config.jar
MD5: 035a0a0863dc2dade55e9572ba99dd88
SHA1: 60c04aadc15a2ad1f39034d3719da49bc4e17e79
SHA256:001881ec1d9df9511c0e66fa6c1ba414c4f630f8d32af9bf0479340c5601fd12
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.pdf.config | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.pdf.config | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | pdfparserconfig | Low
Product | jar | package name | plugin | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.pdf.config | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.pdf.config | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### parser.text.zip: parser.text.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/parser.text.zip/parser.text.jar
MD5: 0568984996ea86f842b9586818dde482
SHA1: a955b2c90d85778bef02553d5bda338091384e33
SHA256:cd0039d001ec0673f6f9a3dd41752e58364fd498bd263f82db835d3ea77b1139
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | parser.text | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | plugin | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:44 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | parser.text | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | plugin | Low
Product | jar | package name | textparser | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:44 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | parser.text | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | parser.text | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar
MD5: 2e11b35715b291ac8d3f7635bce71982
SHA1: 9b814ba4b418f84e71fed4f604e71fff251ad43b
SHA256:47666bcbaf8c339792699239c955a378936afc871190186602ff58715d387876
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc.standalone | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | standalone | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:51 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc.standalone | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | standalone | Highest
Product | jar | package name | standalone | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:51 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc.standalone | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc.standalone | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.standalone.zip: pdfc.standalone.jar: bridge.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridge.js
MD5: 93a24df267249dca305f5af83c047f48
SHA1: 2690836189ad0dd3715568d15b8bba5a3a9fbc93
SHA256:b17c61dcfca7e59009ebe3e57ec254ad68c2dc080d9a194d867a185902e6a433
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgeConfig.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgeConfig.js
MD5: 50c7b33549870b71c25e22443829ba78
SHA1: 0a50eb333055885b58537a1463009c6d321ca110
SHA256:7ba9c85404a965c72b736350b26b97bef813b9e523081ed2bf1f9b7303ba0ce4
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: bridgePDFC.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/bridgePDFC.js
MD5: 918410e4e9590ab87b5ca1ea983ebdf1
SHA1: 422e9fa020147687e2c79fa87f8d7ac23d964df1
SHA256:3d95bb11030e08751e23f02d299b19e2c8db823a14217bdc0cea034a1e23199d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: extraMenu.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/extraMenu.js
MD5: 76f716ef25759cac5242607c7d46afab
SHA1: ffd9728b1116de8148c96cb1aac069abc994692f
SHA256:0f2b1cc0136aacbc57993ce598a490e36849a34cdaccea15f213b1f2410fc002
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removeHeader.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removeHeader.js
MD5: 6155f56ea46454fd9b26ec029b07cb4c
SHA1: fdbb377d77e7a33fccd3e56eda617da18a45af3c
SHA256:7f74294ea3dd2d4561aadf5deb9e1436af5cd08d3f53754b8c2e2321ddad3687
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: removePDFCElements.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/removePDFCElements.js
MD5: cf23507d05d2a8f690f9489d131e7de7
SHA1: bff6a66569787ecf08f314c176220be0ef16f86c
SHA256:3d2d7526c75020284374f9298157f8fb7d0c37d38d079cffda17b94f9b73690a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: theme.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/theme.js
MD5: 9ee2557b2355cd5367ad7b7cdf3505e2
SHA1: 6a8e3c4a8964395018faac989bbbd37abf148cd3
SHA256:0acc32f71a37d0f0f7485be6746f688e449df07e6db3b5ad01973ad7fc3aa53a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.standalone.zip: pdfc.standalone.jar: translation.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.standalone.zip/pdfc.standalone.jar/com/inet/pdfc/standalone/webgui/translation.js
MD5: 087098ce4993357914ab7ee2ca130bc0
SHA1: b77b0d98a5a98b3a5c9317333f29c0c18d36d86e
SHA256:26eb8ace7faad440f3aedd47c1c3f6c1603fe7b150213ad32a4251d1226a3895
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:collate:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/collate/pom.xml
MD5: 992a39f99fe3dc15c118ae48dbd677b7
SHA1: 464299894060cb85408673b5a0c114bd198452ad
SHA256:1d2b90273cc853edcc755cf6e0dd5315c22bb0adacbc01c79bc437d2fcac402f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | collate | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | collate | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/collate@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:core:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/core/pom.xml
MD5: 502c9d2f06cf62c5ac285bab7809991f
SHA1: bc36a1f957d482728432241bcb57d8a658380a08
SHA256:f206b5ca5da0270f41d189f2ea4fa21378ccf84636a9b5ae95c36020df3b650a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | core | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | core | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/core@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:currdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/currdata/pom.xml
MD5: c135b97d469b8ccf8d9c956167c9f430
SHA1: 64f64417795107669e127461da338cf4a0d0bf69
SHA256:c189ab6128f84d96348f1fd05ac60fbb8be783c628be71b0549a90f8222f7440
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | currdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | currdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/currdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:langdata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/langdata/pom.xml
MD5: 4bf78b2e96a7103d760c462eec229e1d
SHA1: 5cbfae9d81b33328d9957a04537f9b1cea94a9d3
SHA256:d135a2d4bcd4ffe15c7f4950083be429ea611b7eb991f79ba9efd1aa28d519aa
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | langdata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | langdata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/langdata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:regiondata:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/regiondata/pom.xml
MD5: 82587df137f511ae93d6a1c1eb3a6b85
SHA1: dab45b6568a01e28324a83ef144817fda24d6f7a
SHA256:063896c31cded4ded5e25fa43026cc0cb5f78cbf5ab7a2d433a96f69d25c7e3d
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | regiondata | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | regiondata | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/regiondata@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar (shaded: com.ibm.icu:translit:77.1)

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar/META-INF/maven/com.ibm.icu/translit/pom.xml
MD5: 16f6a16e682ddf80814caf2f4786a3f7
SHA1: f28c6551ff41ed52a8f758a32e561d60ff8b0aec
SHA256:74354d4b8cc7c3cc5d37cc8c934ef902ccf6e78ac20b9e629b5dd4536edac5a9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | pom | artifactid | translit | Low
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | parent-artifactid | icu4j-root | Low
Product | pom | artifactid | translit | Highest
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | parent-artifactid | icu4j-root | Medium
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/translit@77.1 (Confidence:High)

### pdfc.zip: icu4j.jar

Description:

    International Components for Unicode for Java (ICU4J) is a mature, widely used Java library
        providing Unicode and Globalization support

License:

    Unicode-3.0: https://raw.githubusercontent.com/unicode-org/icu/maint/maint-77/LICENSE

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/icu4j.jar
MD5: 3e8d6fc9877483a0699efa1843b92326
SHA1: 38693cf0b1d7362a8b726af74dc06026a7c23809
SHA256:b3640b9f416a4411fd33c59abbeea8fd57d024c23e1819bf9673220a97499fe3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | icu4j | High
Vendor | file (hint) | name | icu-project | High
Vendor | file (hint) | name | unicode | High
Vendor | jar | package name | ibm | Highest
Vendor | jar | package name | icu | Highest
Vendor | Manifest | automatic-module-name | com.ibm.icu | Medium
Vendor | Manifest | build-jdk-spec | 1.8 | Low
Vendor | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Vendor | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Vendor | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Vendor | Manifest | Implementation-Vendor | Unicode, Inc. | High
Vendor | Manifest | Implementation-Vendor-Id | org.unicode | Medium
Vendor | pom | artifactid | icu4j | Low
Vendor | pom | developer id | markusicu | Medium
Vendor | pom | developer id | richgillam | Medium
Vendor | pom | developer name | Markus Scherer | Medium
Vendor | pom | developer name | Richard Gillam | Medium
Vendor | pom | developer org | Google | Medium
Vendor | pom | groupid | com.ibm.icu | Highest
Vendor | pom | name | ICU4J | High
Vendor | pom | url | https://icu.unicode.org/ | Highest
Vendor | pom (hint) | artifactid | icu-project | Low
Vendor | pom (hint) | artifactid | unicode | Low
Vendor | pom (hint) | name | icu-project | High
Vendor | pom (hint) | name | unicode | High
Product | file | name | icu4j | High
Product | hint analyzer | product | international_components_for_unicode | Highest
Product | jar | package name | ibm | Highest
Product | jar | package name | icu | Highest
Product | Manifest | automatic-module-name | com.ibm.icu | Medium
Product | Manifest | build-jdk-spec | 1.8 | Low
Product | Manifest | bundle-copyright | © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html | Low
Product | Manifest | Bundle-Name | ICU4J | Medium
Product | Manifest | bundle-requiredexecutionenvironment | JavaSE-1.8 | Low
Product | Manifest | bundle-symbolicname | com.ibm.icu | Medium
Product | Manifest | Implementation-Title | International Components for Unicode for Java | High
Product | Manifest | specification-title | International Components for Unicode for Java | Medium
Product | pom | artifactid | icu4j | Highest
Product | pom | developer id | markusicu | Low
Product | pom | developer id | richgillam | Low
Product | pom | developer name | Markus Scherer | Low
Product | pom | developer name | Richard Gillam | Low
Product | pom | developer org | Google | Low
Product | pom | groupid | com.ibm.icu | Highest
Product | pom | name | ICU4J | High
Product | pom | url | https://icu.unicode.org/ | Medium
Version | Manifest | Bundle-Version | 77.1 | High
Version | Manifest | Implementation-Version | 77.1 | High
Version | pom | version | 77.1 | Highest

#### Identifiers

- pkg:maven/com.ibm.icu/icu4j@77.1 (Confidence:High)
- cpe:2.3:a:icu-project:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)
- cpe:2.3:a:unicode:international_components_for_unicode:77.1:*:*:*:*:*:*:* (Confidence:Low)

### pdfc.zip: pdfc-javadoc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar
MD5: 2ea9c50c0e3f3aa981004ba3f63253d1
SHA1: 508700e53772fc47cde2fbaf285a4af29dfd7c6a
SHA256:820ee5021af67dbd9fae21085f16ad5ac9291ae7a4df14628861c4e61aa26066
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc-javadoc | High
Product | file | name | pdfc-javadoc | High

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-3.6.1.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-3.6.1.min.js
MD5: 00727d1d5d9c90f7de826f1a4a9cc632
SHA1: ea61688671d0c3044f2c5b2f2c4af0a6620ac6c2
SHA256:a3cf00c109d907e543bc4f6dbc85eb31068f94515251347e9e57509b52ee3d74
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256:672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jquery-ui | High
Product | file | name | jquery-ui | High
Version | file | version | 1.13.1 | High

#### Identifiers

- pkg:javascript/jquery-ui@1.13.1 (Confidence:Highest)

### pdfc.zip: pdfc-javadoc.jar: member-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/member-search-index.js
MD5: 6b0d6c845b62b81d696f7a43af181584
SHA1: f74a3e9265358bdea3995af040606c885ac0e922
SHA256:fbf37a555a8f7b84d00249055e409779700ff5623d8f34ec963d7b3515218d53
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: module-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/module-search-index.js
MD5: a33da0f469acbd03f77bf407bac505f5
SHA1: 1e996ce630c6e1ada3ea86d7b71dabca0180f8e8
SHA256:814a05983e3267d591c7e62b314eb8eb0504eee844c8a70d494f6edbaa0f4f18
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: package-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/package-search-index.js
MD5: 704b175752fd9646f0b53f0630993ec3
SHA1: ab8c6e78cec3f37d42bae22d017bbb92b736d663
SHA256:e85fb555ff19b3ac1934c0188d4e33f4443ddc4cd557c7dee9b6de5a0a952a05
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: script.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script.js
MD5: baf9d9e16237acbdce975a33c54ee8ae
SHA1: cc6a3c8d72f17eff0d613ddfcf7c1095535573f7
SHA256:9a027b197c6b3b44c4952797b2eb0477318a03093a5bbad089e12959e562b975
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: search.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/search.js
MD5: cb277f670590ffec20a12745260518dc
SHA1: 4b222ef8d1c52e1ce5ceb40a3b5c1fb9cad01eca
SHA256:47c74de257f7e407a21e5d22519b664cfa1c83d04c362bff466c8424b702d31f
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: tag-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/tag-search-index.js
MD5: 95810a7878ddd3f49d938eb6b5c0f1b2
SHA1: 4d0358e131242bfb1a29d1db368e9e24381ad979
SHA256:e31bd7c6847cd8b49a884fe01244f740ad184cdb7aa6449830be21985158f0d9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc-javadoc.jar: type-search-index.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/type-search-index.js
MD5: 709163eef2bdfcabf43d6f1058f7e5c3
SHA1: 0471197c5a2b7bd7ef511433127b1497472e8c54
SHA256:576b26c4b6ae1b4a14e18d6ecf749dfcd7c34408db9dfbdf27f7aa9575b70105
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfc.zip: pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc.jar
MD5: 185490cbd3b81e5f5dceb264a386ffd0
SHA1: 91079c5bbb94c704ded09f1b755ad81a9443a8c7
SHA256:315e2d9e35cbb04fbf6662923d6d428addd7619db7992b91aab2d6e8057f22a3
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:30 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | permissions | Highest
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:30 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfc | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfc | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | jar | package name | permissions | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar
MD5: 5aef3c8013069b950b3c9d68fc470e80
SHA1: d7dea7a51d74a2faf667de8b78dafea4854e6cbd
SHA256:c36195785d0950a8bd36653e5c9a176a5f977c76cf4339d043c0381b72c5c95a
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcserver | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | server | Low
Vendor | Manifest | application-library-allowable-codebase | * | Low
Vendor | Manifest | built-date | 2025-10-01 20:30 | Low
Vendor | Manifest | codebase | * | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | permissions | all-permissions | Low
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | trusted-library | false | Low
Vendor | Manifest | trusted-only | false | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcserver | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | persistence | Low
Product | jar | package name | server | Low
Product | Manifest | application-library-allowable-codebase | * | Low
Product | Manifest | built-date | 2025-10-01 20:30 | Low
Product | Manifest | codebase | * | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcserver | High
Product | Manifest | permissions | all-permissions | Low
Product | Manifest | specification-title | pdfcserver | Medium
Product | Manifest | trusted-library | false | Low
Product | Manifest | trusted-only | false | Low
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### pdfcserver.zip: pdfcserver.jar: compareconfigrenderer.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcserver.zip/pdfcserver.jar/com/inet/pdfc/server/structure/compareconfigrenderer.js
MD5: ca54201f240ce7fea03db4f46ecd818a
SHA1: 420f31523aa51830c134d193dae0a692eff5b4da
SHA256:0aa678824bea93ed82b1747fc75512915488e2d65b5f11c9c22d4214bb129cec
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### pdfcsetupwizard.zip: pdfcsetupwizard.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar
MD5: 7665d5de8a9ca0a63f8cd2aa70a8a401
SHA1: b4526dedd544655e441847af8f3b8489d3b458ea
SHA256:f23adf13c9bdf8718d4b01268a066c999ea7cce9a23602f32a753078315c47eb
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | pdfcsetupwizard | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | setupwizard | Low
Vendor | Manifest | built-date | 2025-10-01 20:45 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | pdfcsetupwizard | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | setupwizard | Low
Product | jar | package name | steps | Low
Product | Manifest | built-date | 2025-10-01 20:45 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | pdfcsetupwizard | High
Product | Manifest | specification-title | pdfcsetupwizard | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### pdfcsetupwizard.zip: pdfcsetupwizard.jar: controller.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfcsetupwizard.zip/pdfcsetupwizard.jar/com/inet/pdfc/setupwizard/steps/license/controller.js
MD5: b21c2ee13289577d98bbb1687726af34
SHA1: 9032230fff5222847734d3cb4723103733f88e92
SHA256:6c1d316ea3da704c21cc9e3fa2426863fa173c3d44a212506fc4bc1e187991e9
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---

#### Identifiers

- None

### processbridge.pdfc.zip: processbridge.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/processbridge.pdfc.zip/processbridge.pdfc.jar
MD5: 672952845b9267628233d559a37af881
SHA1: cf8e459ad2c507577ce401a6854b7f9b6faa9d3d
SHA256:902fb6229dd5fa36592ca11a375ba3b158ec0f4a3588cb8ab123c60f76384da5
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | processbridge.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | processbridge | Low
Vendor | Manifest | built-date | 2025-10-01 20:48 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | processbridge.pdfc | High
Product | jar | package name | api | Low
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | processbridge | Highest
Product | jar | package name | processbridge | Low
Product | Manifest | built-date | 2025-10-01 20:48 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | processbridge.pdfc | High
Product | Manifest | specification-title | processbridge.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

### slf4j-api-2.0.16.jar

Description:

    The slf4j API

License:

    http://www.opensource.org/licenses/mit-license.php

File Path: /home/jenkins/.gradle/caches/modules-2/files-2.1/org.slf4j/slf4j-api/2.0.16/172931663a09a1fa515567af5fbef00897d3c04/slf4j-api-2.0.16.jar
MD5: c8de8f5d740584cb24b5652cfba8b3c4
SHA1: 0172931663a09a1fa515567af5fbef00897d3c04
SHA256:a12578dde1ba00bd9b816d388a0b879928d00bab3c83c240f7013bf4196c579a
Referenced In Project/Scope: standalone:inetPlugin
slf4j-api-2.0.16.jar is in the transitive dependency tree of the listed items.Included by: pkg:maven/pdfc/standalone@25.10

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | slf4j-api | High
Vendor | gradle | artifactid | slf4j-api | Highest
Vendor | gradle | groupid | org.slf4j | Highest
Vendor | jar | package name | slf4j | Highest
Vendor | Manifest | build-jdk-spec | 21 | Low
Vendor | Manifest | bundle-docurl | http://www.slf4j.org | Low
Vendor | Manifest | bundle-symbolicname | slf4j.api | Medium
Vendor | Manifest | multi-release | true | Low
Vendor | pom | artifactid | slf4j-api | Low
Vendor | pom | groupid | org.slf4j | Highest
Vendor | pom | name | SLF4J API Module | High
Vendor | pom | parent-artifactid | slf4j-parent | Low
Vendor | pom | url | http://www.slf4j.org | Highest
Product | file | name | slf4j-api | High
Product | gradle | artifactid | slf4j-api | Highest
Product | jar | package name | slf4j | Highest
Product | Manifest | build-jdk-spec | 21 | Low
Product | Manifest | bundle-docurl | http://www.slf4j.org | Low
Product | Manifest | Bundle-Name | SLF4J API Module | Medium
Product | Manifest | bundle-symbolicname | slf4j.api | Medium
Product | Manifest | Implementation-Title | slf4j-api | High
Product | Manifest | multi-release | true | Low
Product | pom | artifactid | slf4j-api | Highest
Product | pom | groupid | org.slf4j | Highest
Product | pom | name | SLF4J API Module | High
Product | pom | parent-artifactid | slf4j-parent | Medium
Product | pom | url | http://www.slf4j.org | Medium
Version | file | version | 2.0.16 | High
Version | gradle | version | 2.0.16 | Highest
Version | Manifest | Bundle-Version | 2.0.16 | High
Version | Manifest | Implementation-Version | 2.0.16 | High
Version | pom | version | 2.0.16 | Highest

#### Identifiers

- pkg:maven/org.slf4j/slf4j-api@2.0.16 (Confidence:High)

### taskplanner.pdfc.zip: taskplanner.pdfc.jar

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/taskplanner.pdfc.zip/taskplanner.pdfc.jar
MD5: 30d63e0a1dc242904f4fdbb354e28d28
SHA1: 7d0c89ff87918475b23d25bad11b998a98702fe2
SHA256:64809f3e89d872f180d6e998cc640b0137e9efd1348ae3ec332884ac7a43167c
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | taskplanner.pdfc | High
Vendor | jar | package name | inet | Low
Vendor | jar | package name | pdfc | Low
Vendor | jar | package name | taskplanner | Low
Vendor | Manifest | built-date | 2025-10-01 20:49 | Low
Vendor | Manifest | implementation-group | pdfc | Low
Vendor | Manifest | Implementation-Vendor | i-net software | High
Vendor | Manifest | Implementation-Vendor-Id | de.inetsoftware | Medium
Vendor | Manifest | specification-vendor | i-net software | Low
Vendor | Manifest | vendor | i-net software GmbH, Berlin, Germany | Medium
Product | file | name | taskplanner.pdfc | High
Product | jar | package name | pdfc | Highest
Product | jar | package name | pdfc | Low
Product | jar | package name | taskplanner | Highest
Product | jar | package name | taskplanner | Low
Product | Manifest | built-date | 2025-10-01 20:49 | Low
Product | Manifest | implementation-group | pdfc | Low
Product | Manifest | Implementation-Title | taskplanner.pdfc | High
Product | Manifest | specification-title | taskplanner.pdfc | Medium
Version | jar | package name | pdfc | Highest
Version | Manifest | Implementation-Version | 25.10.198 | High

#### Identifiers

- cpe:2.3:a:inetsoftware:pdfc:25.10.198:*:*:*:*:*:*:* (Confidence:Low)

## Suppressed Vulnerabilities

### pdfc.zip: pdfc-javadoc.jar: jquery-ui.min.js

File Path: /home/jenkins/workspace/pdfc/Check-Product-Installer-for-Security-Problems/PDFCInstaller/standalone/build/tmp/dependencies/i-net PDFC/plugins/pdfc.zip/pdfc-javadoc.jar/script-dir/jquery-ui.min.js
MD5: 32059df39c14a910ccc2325f6a3cd62f
SHA1: d3289f1b527a3f054d303ec769402e037fbfcf4b
SHA256: 672f278182cdf04f3c62a5b8d93f406791854a28791f27aecdb9981573c61424
Referenced In Project/Scope: standalone

#### Evidence

Type | Source | Name | Value | Confidence
--- | --- | --- | --- | ---
Vendor | file | name | jquery-ui | High
Product | file | name | jquery-ui | High
Version | file | version | 1.13.1 | High

#### Suppressed Identifiers

- None

#### Suppressed Vulnerabilities

CVE-2022-31160 suppressed

    jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`.

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Notes: JavaDoc embedded JQuery UI - requires updated Java Version with newer javadoc
CVSSv3:

- MEDIUM (6.1)
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A

References:

- info - https://github.com/advisories/GHSA-h6gj-6jjq-h8g9
- info - https://github.com/jquery/jquery-ui/commit/8cc5bae1caa1fcf96bf5862c5646c787020ba3f9
- info - https://github.com/jquery/jquery-ui/issues/2101
- info - https://nvd.nist.gov/vuln/detail/CVE-2022-31160
- security-advisories@github.com - EXPLOIT,MITIGATION,RELEASE_NOTES,THIRD_PARTY_ADVISORY
- security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY
- security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY
- security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY
- security-advisories@github.com - THIRD_PARTY_ADVISORY
- security-advisories@github.com - THIRD_PARTY_ADVISORY

Vulnerable Software & Versions (NVD):

- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.0:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.1:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.2:*:*:*:*:drupal:*:*
- cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.3:*:*:*:*:drupal:*:*
- cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.2
- cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

This report contains data retrieved from the National Vulnerability Database.
This report may contain data retrieved from the CISA Known Exploited Vulnerability Catalog.
This report may contain data retrieved from the Github Advisory Database (via NPM Audit API).
This report may contain data retrieved from RetireJS.
This report may contain data retrieved from the Sonatype OSS Index.