CVE-2024-35116 not detected

### Current Behavior

Hello,

I'm migrating from OWASP Dependency Check (ODC) to OWASP Dependency track (ODT): so I'm trying to compare results for different projets.
I noticed a recurring difference:
While ODC reports the CVE-2024-35116 caused by the presence of the IBM MQ dependency, the CVE is not at all present on ODT.

If I check the components/depenencies list of ODT I can see the faulty dependencies are detected:

https://www.ibm.com/support/pages/node/7158071
https://nvd.nist.gov/vuln/detail/CVE-2024-35116#range-13182839

ODC findings:

Thanks for your help!

Mel

### Steps to Reproduce

1. Upload an SBOM having a dependency on
"group": "com.ibm.mq",
"name": "com.ibm.mq",
"version": "9.3.0.2",
2. Once the processing is done: check the Dependency Graph to make sure the dependency was properly identified
3. Check the vulnerability section -> no CVEs are linked to the IBM MQ dependency

### Expected Behavior

I would expect to see the https://nvd.nist.gov/vuln/detail/CVE-2024-35116 linked to IBM MQ 9.3.0.2

### Dependency-Track Version

4.11.7

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

15

### Browser

N/A

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported