False positive report on NVD analyzer

### Current Behavior

DependencyTrack reports a false positive CVE as the version from NVD is not compared in the right way. If you upload the following cyclonedx file to DependencyTrack 4.8.0, DependencyTrack will report a vulnerability which was fixed in gSOAP 2.8.75. However, the version in the cyclonedx file is 2.8.123e.
Analyzer is NVD (unable to attach screenshot for some reason).

[0d67de0f-d271-47d4-a41c-efc336e7f8d9-inventory.cdx.json.zip](https://github.com/DependencyTrack/dependency-track/files/11633881/0d67de0f-d271-47d4-a41c-efc336e7f8d9-inventory.cdx.json.zip)

### Steps to Reproduce

1.Upload the attached SBOM to DependencyTrack
2.Check for the detection of CVE-2019-7659

### Expected Behavior

DependencyTrack should not detect CVE-2019-7659 in gSOAP 2.8.123e.

### Dependency-Track Version

4.8.0

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Mozilla Firefox

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported