CVE-2020-4682 not returned for project having IBM MQ vulnerable dependency

### Current Behavior

Hello,

We're currently migrating from OWASP Dependency Check to Dependency Track and during our tests we noticed that the CVE-2020-4682 (https://nvd.nist.gov/vuln/detail/CVE-2020-4682) is returned for a project having a dependency on IBM MQ 8.0, but the CVE is not present in the DT report.
DC:
DT does see the dependency...but no trace of the CVE:

Other CVEs are being returned for the project so I don't think there's an issue with the scan itself
The CPE for CVE-2020-4682 seems pretty clear and covers our project's dependency version
So I must admit that I have no other ideas on why DT is not returning it :(

Thank you very much for your help!
Best regards,
Andreea

### Steps to Reproduce

1. Upload an SBOM having a dependency on
"group": "com.ibm.mq",
"name": "com.ibm.mq",
"version": "8.0.0.6",
2. once the processing is done: check the Dependency Graph to make sure the dependency was properly identified
3. check the vulnerability section -> no CVEs are linked to the IBM MQ dependency

### Expected Behavior

I would expect to see the CVE-2020-4682 linked to IBM MQ 8.0.0.6 (this is just an example...for this version the patched was applied starting with version 8.0.0.15)

### Dependency-Track Version

4.11.3

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

15

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

No repository files, tests, or entry points are named in the report. Reproduce with an SBOM containing com.ibm.mq:com.ibm.mq:8.0.0.6, confirm the dependency appears in the graph, and verify that CVE-2020-4682 is linked in the vulnerability section.

Written by the indexing model from the issue text.