fix: improve cpe parsing in sbom code

[terriko]

• related to the code review for fix: parse CPE names correctly #4041 #4063
• and issue fix: NVD cpe parser doesn't escape \:'s in product and vendor name #4041

Looks like we do indeed make the same parsing mistake when handling cpe's in the sbom code:

cve-bin-tool/cve_bin_tool/sbom_manager/__init__.py

Line 346 in ab92aab

cpe = cpe22.split(":")

and below that a bit in the same file.

Should be able to use the same fix.

[ranjanmangla1]

I would love to work on this @terriko, can you assign me this issue?

[terriko]

@ranjanmangla1 have fun! Let us know if you get stuck.