False negative on library hibernate-validator-5.0.3.Final.jar - reported as cpe:/a:hibernate:hibernate_validator:5.0.3

<dependency>
   <groupId>org.hibernate</groupId>
   <artifactId>hibernate-validator</artifactId>
   <version>5.0.3.Final</version>
</dependency>

Should be reported as CVE-2014-3558.

Not sure though if the Vulnerable software and versions configuration at NVD is the issue.