{"type":"bundle","id":"bundle--0f717ae3-fb7b-5584-b88e-2e31a829d009","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--30530366-5e96-5303-89c3-05a8bc7f9b96","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-28T08:04:58.222232Z","modified":"2026-08-28T08:04:58.222232Z","name":"CVE-2024-38856","description":"Apache OFBiz Incorrect Authorization Vulnerability","external_references":[{"source_name":"cve","external_id":"CVE-2024-38856","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38856"}]},{"type":"report","spec_version":"2.1","id":"report--20a6afc7-e606-5fd2-b309-332ebac448e8","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-28T08:04:58.222232Z","modified":"2026-10-30T16:13:08.387204Z","name":"CVE-2024-38856","description":"Public evidence documents CVE-2024-38856. This report does not assess any organization.","published":"2026-08-28T08:04:58.222232Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","vulnerability--30530366-5e96-5303-89c3-05a8bc7f9b96"],"confidence":100}]}