OR
cpe:2.3:a:apache:commons_collections:*:*:*:*:*:*:*:* versions up to 3.2.1 (inclusive)
cpe:2.3:a:apache:commons_collections:4.0:*:*:*:*:*:*:*
