dependency-check-suppression.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
  ~ /*
  ~ * SecureCodeBox (SCB)
  ~ * Copyright 2015-2018 iteratec GmbH
  ~ *
  ~ * Licensed under the Apache License, Version 2.0 (the "License");
  ~ * you may not use this file except in compliance with the License.
  ~ * You may obtain a copy of the License at
  ~ *
  ~ * 	http://www.apache.org/licenses/LICENSE-2.0
  ~ *
  ~ * Unless required by applicable law or agreed to in writing, software
  ~ * distributed under the License is distributed on an "AS IS" BASIS,
  ~ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  ~ * See the License for the specific language governing permissions and
  ~ * limitations under the License.
  ~ */
  -->

<!--
    This file is used to suppress false positives in the dependency check
-->
<suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">

    <!--
        The issue CVE-2008-0732 seems to only affect SUSE LINUX init scripts. We are not using them.
             -->
    <suppress>
        <cve>CVE-2008-0732</cve>
    </suppress>

    <!--
    The issues CVE-2016-6325, CVE-2016-5425 seems to only affect Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and JBoss EWS 2 . We are using embedded appserver.
         -->
    <suppress>
        <cve>CVE-2016-6325</cve>
        <cve>CVE-2016-5425</cve>
    </suppress>

    <!--
    The issue CVE-2019-0232 seems to only affect Windows Systems. The engine isn' intended run run windows.
        -->
    <suppress>
        <cve>CVE-2019-0232</cve>
    </suppress>

    <suppress>
        <!--
        False Positive.
        Does not apply to our Spring Version: https://pivotal.io/security/cve-2018-1258
        -->
        <cve>CVE-2018-1258</cve>
    </suppress>

</suppressions>