Security updates¶
This page lists the F5 vulnerability bugs of this release.
CVE Fixes¶
ID2035257¶
Title: CVE-2025-54479: TMM may restart under certain conditions
Symptoms: BIG-IP PEM vulnerability CVE-2025-54479
Conditions: BIG-IP PEM vulnerability CVE-2025-54479
Impact: BIG-IP PEM vulnerability CVE-2025-54479
Known Issue Category: Defect, Has No Workaround
Mitigation / Workaround: NA
Fix Text: BIG-IP PEM vulnerability CVE-2025-54479
ID2053545¶
Title: CVE-2025-59781: DNS cache vulnerability
Symptoms: BIG-IP DNS cache vulnerability CVE-2025-59781
Conditions: BIG-IP DNS cache vulnerability CVE-2025-59781
Impact: BIG-IP DNS cache vulnerability CVE-2025-59781
Known Issue Category: Defect, Has No Workaround
Mitigation / Workaround: NA
ID2099593¶
Title: CVE-2025-46706: Certain irule configuration may lead to ineffectiveness of flow control
Symptoms: A specific HTTP::respond irule configuration may lead to ineffectiveness of flow control, due to accumulation of memory.
Conditions: HTTP Virtual server with specific way of HTTP::respond irule configuration.
Impact: Ineffectiveness of flow control leading to connection reset.
Known Issue Category: Defect, Has Workaround
Mitigation / Workaround: The issue can be worked around by adding a Connection: close header to the response via HTTP::respond.
Fix Text: Specific configuration of HTTP::respond irule not causing any connection reset.
KB Article: BIG-IP iRules vulnerability CVE-2025-46706
ID2099601¶
Title: CVE-2025-54805: TMM vulnerability
Symptoms: BIG-IP TMM vulnerability CVE-2025-54805
Conditions: BIG-IP TMM vulnerability CVE-2025-54805
Impact: BIG-IP TMM vulnerability CVE-2025-54805
Known Issue Category: Defect, Has No Workaround
Mitigation / Workaround: NA
Fix Text: BIG-IP TMM vulnerability CVE-2025-54805
ID2008497¶
Title: CVE-2025-54500: A Particular HTTP/2 sequence may cause High CPU utilization
Symptoms: Certain sequences of traffic from the HTTP/2 client may cause high CPU utilization and denial of service.
Conditions: A virtual server with an HTTP2 profile.
Impact: It causes CPU overload and memory exhaustion.
Known Issue Category: Defect, Has Workaround
Mitigation / Workaround: Disable HTTP2 profile usage entirely.
Fix Text: The provided fix mitigates the CPU overload and memory exhaustion issues.
KB Article: HTTP/2 vulnerability CVE-2025-54500
| CVE Number | Bug IDs | Image Names |
|---|---|---|
| CVE-2016-20013 | 1638669, 1638737, 1638741, 1638745 | f5-cert-client, rabbit, spk-csrc, spk-cwc |
| CVE-2016-2781 | 1638757, 1638765, 1638773, 2102241, 2102709 | crdupdater, f5-coremond, f5-fluentd, f5-version-validator, rabbit |
| CVE-2021-39293 | 1638829 | rabbit |
| CVE-2021-41771 | 1638837 | rabbit |
| CVE-2021-41772 | 1638845 | rabbit |
| CVE-2021-44716 | 1638853 | rabbit |
| CVE-2021-44717 | 1638861, 2069121 | rabbit |
| CVE-2022-1705 | 1638869, 2069125 | rabbit |
| CVE-2022-1962 | 1638877, 2069129 | rabbit |
| CVE-2022-23772 | 1638885 | rabbit |
| CVE-2022-23806 | 1638893 | rabbit |
| CVE-2022-24675 | 1638901 | rabbit |
| CVE-2022-24921 | 1638909 | rabbit |
| CVE-2022-27664 | 1638921, 2068985 | rabbit |
| CVE-2022-28131 | 1638929 | rabbit |
| CVE-2022-28327 | 1638937 | rabbit |
| CVE-2022-2879 | 1638945, 2068997 | rabbit |
| CVE-2022-2880 | 1638953 | rabbit |
| CVE-2022-29526 | 1638961, 2069133 | rabbit |
| CVE-2022-29804 | 1638969 | rabbit |
| CVE-2022-30580 | 1638977 | rabbit |
| CVE-2022-30629 | 1638985, 2069313 | rabbit |
| CVE-2022-30630 | 1638993 | rabbit |
| CVE-2022-30631 | 1639001 | rabbit |
| CVE-2022-30632 | 1639009 | rabbit |
| CVE-2022-30633 | 1639017 | rabbit |
| CVE-2022-30634 | 1639025 | rabbit |
| CVE-2022-30635 | 1639033 | rabbit |
| CVE-2022-32148 | 1639041, 2069137 | rabbit |
| CVE-2022-32189 | 1639057, 2069037 | rabbit |
| CVE-2022-3219 | 1636485, 1639061, 1639065, 1639069, 1639073, 1639077, 1639081, 1639089, 1639093, 1639097, 1639101, 1639105, 1639109, 1639121, 1639125, 1639129, 1639133, 1639137, 1639149, 1639153, 1639157, 2102245, 2102345, 2102449, 2102581, 2103341 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5ing-tmm-pod-manager, f5ingress, spk-cwc, tmm-img, tmrouted-img |
| CVE-2022-40897 | 2069665 | f5-fluentd |
| CVE-2022-41715 | 1639165, 2069041 | rabbit |
| CVE-2022-41716 | 1639173 | rabbit |
| CVE-2022-41717 | 1639181, 1639189, 2069141 | f5-blobd, rabbit |
| CVE-2022-41720 | 1639201 | rabbit |
| CVE-2022-41722 | 1639217 | rabbit |
| CVE-2022-41723 | 1639237 | rabbit |
| CVE-2022-41724 | 1639249 | rabbit |
| CVE-2022-41725 | 1639261 | rabbit |
| CVE-2023-2253 | 1639265 | opentelemetry-collector-contrib |
| CVE-2023-24532 | 1639277, 2069145 | rabbit |
| CVE-2023-24534 | 1639289, 1639293 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-24536 | 1639305, 1639309 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-24537 | 1639321, 1639325 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-24538 | 1639337, 1639341 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-24539 | 1639353, 1639357 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-24540 | 1639369, 1639373 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-28840 | 1639377 | opentelemetry-collector-contrib |
| CVE-2023-28841 | 1639381, 2070597 | opentelemetry-collector-contrib |
| CVE-2023-28842 | 1639385, 2070601 | opentelemetry-collector-contrib |
| CVE-2023-29400 | 1639397, 1639401 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-29403 | 1639413, 1639417 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-29406 | 1639433, 1639437, 2069149 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-29409 | 1639453, 1639457, 2069153 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-34231 | 1639461 | opentelemetry-collector-contrib |
| CVE-2023-38697 | 2069677 | f5-fluentd |
| CVE-2023-39318 | 1639477, 1639481, 2069157 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-39319 | 1639497, 1639501, 2069161 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-39325 | 1639517, 1639561, 1639565, 1639569 | cert-manager-webhook, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-39326 | 1639577, 1639585, 1639625, 1639629, 1639633, 2069165, 2070053 | cert-manager-controller, cert-manager-webhook, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-3978 | 1639641, 1639649, 1639661, 1639677, 1639681, 2069813, 2070057, 2070605 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-license-helper, opentelemetry-collector-contrib, spk-cwc |
| CVE-2023-42363 | 1639685 | f5dr-img-init |
| CVE-2023-42364 | 1639689 | f5dr-img-init |
| CVE-2023-42365 | 1639693 | f5dr-img-init |
| CVE-2023-42366 | 1639697 | f5dr-img-init |
| CVE-2023-44487 | 1639713, 1639745, 1639749, 2070609 | cert-manager-webhook, opentelemetry-collector-contrib, spk-cwc |
| CVE-2023-45142 | 1639757, 1639761 | cert-manager-webhook, opentelemetry-collector-contrib |
| CVE-2023-45283 | 1639777, 1639805, 1639809, 1639813 | cert-manager-webhook, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-45284 | 1639821, 1639829, 1639857, 1639861, 1639865, 2069169, 2070061 | cert-manager-controller, cert-manager-webhook, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-45287 | 1639877, 1639881 | opentelemetry-collector-contrib, rabbit |
| CVE-2023-45288 | 1639889, 1639897, 1639909, 1639913, 1639921, 1639965, 1639969, 1639977, 1639989, 1639993, 1639997, 1640001, 2070573, 2217665 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-cert-client, f5-csm-qkview, f5-toda-tmstatsd, f5-version-validator, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-csrc, spk-cwc |
| CVE-2023-45289 | 1640017, 1640025, 1640061, 1640073, 1640077, 1640081, 2069173, 2069821, 2070065 | cert-manager-controller, cert-manager-webhook, f5-license-helper, f5dr-img-init, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-45290 | 1640089, 1640097, 1640145, 1640149, 1640153, 2069177, 2069825, 2070069 | cert-manager-controller, cert-manager-webhook, f5-license-helper, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2023-46129 | 1640157 | spk-cwc |
| CVE-2023-47108 | 1640165 | opentelemetry-collector-contrib |
| CVE-2023-48795 | 1640169, 1640177, 1640205, 1640209, 2069829, 2070073, 2070613 | cert-manager-controller, cert-manager-webhook, f5-license-helper, opentelemetry-collector-contrib, spk-cwc |
| CVE-2023-50658 | 1640213 | opentelemetry-collector-contrib |
| CVE-2024-10963 | 2102605 | f5-fluentd |
| CVE-2024-12133 | 2102609 | f5-fluentd |
| CVE-2024-12243 | 2102613 | f5-fluentd |
| CVE-2024-13176 | 2102713 | f5-fluentd |
| CVE-2024-21626 | 1640217 | opentelemetry-collector-contrib |
| CVE-2024-2236 | 1636577, 1640221, 1640225, 1640229, 1640233, 1640237, 1640241, 1640249, 1640253, 1640257, 1640265, 1640269, 1640273, 1640281, 1640285, 1640293, 1640301, 1640305, 1640309, 1640313, 1640317 | crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, rabbit, spk-csrc, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-24557 | 1640325, 2070617 | opentelemetry-collector-contrib |
| CVE-2024-24783 | 1640333, 1640341, 1640389, 1640393, 1640397, 2069189, 2069841, 2070077 | cert-manager-controller, cert-manager-webhook, f5-license-helper, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2024-24784 | 1640413, 1640461, 1640465, 2069193, 2069845 | cert-manager-webhook, f5-license-helper, opentelemetry-collector-contrib, rabbit |
| CVE-2024-24785 | 1640477, 1640485, 1640533, 1640537, 1640541, 2069197, 2069849, 2070081 | cert-manager-controller, cert-manager-webhook, f5-license-helper, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2024-24786 | 1640549, 1640557, 1640569, 1640573, 1640597, 1640601, 1640609, 1640613, 1640617, 2069853, 2070085, 2214901, 2217673 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-license-helper, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, opentelemetry-collector-contrib, spk-cwc |
| CVE-2024-24788 | 1640705 | rabbit |
| CVE-2024-24789 | 1640729, 1640737, 1640749, 1640753, 1640829, 1640833, 1640837, 1640841, 2069201, 2069857, 2070089 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-cert-client, f5-license-helper, opentelemetry-collector-contrib, rabbit, spk-csrc, spk-cwc |
| CVE-2024-24790 | 1640865, 1640881, 1640957, 1640961, 1640969, 2068953, 2069773 | cert-manager-webhook, f5-cert-client, f5-license-helper, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2024-24791 | 1640993, 1641005, 1641009, 1641013, 1641065, 1641085, 1641089, 1641093, 1641097, 2069205, 2069861 | cert-manager-webhook, f5-blobd, f5-cert-client, f5-coremond, f5-license-helper, f5-version-validator, opentelemetry-collector-contrib, rabbit, spk-csrc, spk-cwc |
| CVE-2024-26458 | 1641121 | f5-debug-sidecar |
| CVE-2024-26461 | 1641141 | f5-debug-sidecar |
| CVE-2024-26462 | 1641161 | f5-debug-sidecar |
| CVE-2024-28180 | 1641181, 1641185, 1641189, 1641209, 1641213, 2071145 | cert-manager-controller, crd-conversion, f5-debug-sidecar, opentelemetry-collector-contrib, spk-cwc |
| CVE-2024-29018 | 1641221, 2070621 | opentelemetry-collector-contrib |
| CVE-2024-34155 | 1697441, 1697449, 1697465, 1697505, 1697549, 2069209, 2070093, 2070625, 2214425 | cert-manager-controller, cert-manager-webhook, f5-cert-client, f5-license-helper, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2024-34156 | 1697569, 1697577, 1697589, 1697593, 1697633, 1697673, 1697677, 2214409 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-cert-client, f5-license-helper, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2024-34158 | 1697461, 1697545, 1697697, 1697705, 1697717, 1697721, 1697761, 1697801, 1697805, 2069213, 2070097, 2214429 | cert-manager-controller, cert-manager-webhook, f5-blobd, f5-cert-client, f5-license-helper, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2024-35255 | 1641225, 2070629 | opentelemetry-collector-contrib |
| CVE-2024-41110 | 1641269 | opentelemetry-collector-contrib |
| CVE-2024-41996 | 1698657, 1698661, 1698665, 1698669, 1698673, 1698677, 1698685, 1698689, 1698693, 1698697, 1698701, 1698705, 1698709, 1698713, 1698717, 1698721, 1698725, 1698733, 1698741, 1698745, 1698749, 1698753, 2071969 | baseos, crd-conversion, crdupdater, f5-blobd, f5-cert-client, f5-coremond, f5-csm-qkview, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-fluentbit, f5-fluentd, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, rabbit, spk-cwc, tmm-img, tmrouted-img |
| CVE-2024-45043 | 1641273 | opentelemetry-collector-contrib |
| CVE-2024-45310 | 1698797 | opentelemetry-collector-contrib |
| CVE-2024-45336 | 2069217, 2069869, 2070101, 2070633, 2102485, 2102617, 2213685, 2214433 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2024-45337 | 2070565, 2070789, 2102965 | f5-debug-sidecar, f5-downloader, opentelemetry-collector-contrib |
| CVE-2024-45339 | 2070833, 2103005 | f5-debug-sidecar, f5-downloader |
| CVE-2024-45341 | 2069225, 2069877, 2070105, 2070641, 2102489, 2102621, 2214437 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2024-45490 | 1698809 | f5-license-helper |
| CVE-2024-45492 | 1698849 | f5-license-helper |
| CVE-2024-47220 | 1699417 | f5-fluentd |
| CVE-2024-50156 | 1752417 | f5-fluentd |
| CVE-2024-50160 | 1752433 | f5-fluentd |
| CVE-2024-50166 | 1752449 | f5-fluentd |
| CVE-2024-50168 | 1752457 | f5-fluentd |
| CVE-2024-50169 | 1752461 | f5-fluentd |
| CVE-2024-50175 | 1752477 | f5-fluentd |
| CVE-2024-50176 | 1752481 | f5-fluentd |
| CVE-2024-50177 | 1752485 | f5-fluentd |
| CVE-2024-50178 | 1752489 | f5-fluentd |
| CVE-2024-50179 | 1752493 | f5-fluentd |
| CVE-2024-50180 | 1752497 | f5-fluentd |
| CVE-2024-50181 | 1752501 | f5-fluentd |
| CVE-2024-50182 | 1752505 | f5-fluentd |
| CVE-2024-50183 | 1752509 | f5-fluentd |
| CVE-2024-50184 | 1752513 | f5-fluentd |
| CVE-2024-50185 | 1752517 | f5-fluentd |
| CVE-2024-50186 | 1752521 | f5-fluentd |
| CVE-2024-50187 | 1752525 | f5-fluentd |
| CVE-2024-50188 | 1752529 | f5-fluentd |
| CVE-2024-50189 | 1752533 | f5-fluentd |
| CVE-2024-50191 | 1752537 | f5-fluentd |
| CVE-2024-50192 | 1752541 | f5-fluentd |
| CVE-2024-50193 | 1752545 | f5-fluentd |
| CVE-2024-50194 | 1752549 | f5-fluentd |
| CVE-2024-50195 | 1752553 | f5-fluentd |
| CVE-2024-50196 | 1752557 | f5-fluentd |
| CVE-2024-50197 | 1752561 | f5-fluentd |
| CVE-2024-50198 | 1752565 | f5-fluentd |
| CVE-2024-50199 | 1752569 | f5-fluentd |
| CVE-2024-50200 | 1752573 | f5-fluentd |
| CVE-2024-50201 | 1752577 | f5-fluentd |
| CVE-2024-50202 | 1752581 | f5-fluentd |
| CVE-2024-50203 | 1752585 | f5-fluentd |
| CVE-2024-50205 | 1752589 | f5-fluentd |
| CVE-2024-50206 | 1752593 | f5-fluentd |
| CVE-2024-50207 | 1752597 | f5-fluentd |
| CVE-2024-50208 | 1752601 | f5-fluentd |
| CVE-2024-50209 | 1752605 | f5-fluentd |
| CVE-2024-50211 | 1752609 | f5-fluentd |
| CVE-2024-50215 | 1752613 | f5-fluentd |
| CVE-2024-50216 | 1752617 | f5-fluentd |
| CVE-2024-50217 | 1752621 | f5-fluentd |
| CVE-2024-50218 | 1752625 | f5-fluentd |
| CVE-2024-50219 | 1752629 | f5-fluentd |
| CVE-2024-50220 | 1752633 | f5-fluentd |
| CVE-2024-50221 | 1752637 | f5-fluentd |
| CVE-2024-50222 | 1752641 | f5-fluentd |
| CVE-2024-50223 | 1752645 | f5-fluentd |
| CVE-2024-50224 | 1752649 | f5-fluentd |
| CVE-2024-50225 | 1752653 | f5-fluentd |
| CVE-2024-50226 | 1752657 | f5-fluentd |
| CVE-2024-50228 | 1752661 | f5-fluentd |
| CVE-2024-50229 | 1752665 | f5-fluentd |
| CVE-2024-50230 | 1752669 | f5-fluentd |
| CVE-2024-50231 | 1752673 | f5-fluentd |
| CVE-2024-50232 | 1752677 | f5-fluentd |
| CVE-2024-50233 | 1752681 | f5-fluentd |
| CVE-2024-50234 | 1752685 | f5-fluentd |
| CVE-2024-50235 | 1752689 | f5-fluentd |
| CVE-2024-50236 | 1752693 | f5-fluentd |
| CVE-2024-50237 | 1752697 | f5-fluentd |
| CVE-2024-50238 | 1752701 | f5-fluentd |
| CVE-2024-50239 | 1752705 | f5-fluentd |
| CVE-2024-50240 | 1752709 | f5-fluentd |
| CVE-2024-50242 | 1752713 | f5-fluentd |
| CVE-2024-50243 | 1752717 | f5-fluentd |
| CVE-2024-50244 | 1752721 | f5-fluentd |
| CVE-2024-50245 | 1752725 | f5-fluentd |
| CVE-2024-50246 | 1752729 | f5-fluentd |
| CVE-2024-50247 | 1752733 | f5-fluentd |
| CVE-2024-50249 | 1752741 | f5-fluentd |
| CVE-2024-50251 | 1752749 | f5-fluentd |
| CVE-2024-50252 | 1752753 | f5-fluentd |
| CVE-2024-50255 | 1752757 | f5-fluentd |
| CVE-2024-50256 | 1752761 | f5-fluentd |
| CVE-2024-50257 | 1752765 | f5-fluentd |
| CVE-2024-50258 | 1752769 | f5-fluentd |
| CVE-2024-50259 | 1752773 | f5-fluentd |
| CVE-2024-50261 | 1752777 | f5-fluentd |
| CVE-2024-50262 | 1752781 | f5-fluentd |
| CVE-2024-50263 | 1752785 | f5-fluentd |
| CVE-2024-50602 | 2069229, 2069881 | f5-license-helper, rabbit |
| CVE-2024-51744 | 1751045, 2070685 | opentelemetry-collector-contrib |
| CVE-2024-56406 | 2102625 | f5-fluentd |
| CVE-2024-56433 | 2102253, 2102353, 2102457, 2102589, 2102717, 2102841, 2102953, 2103217, 2103349 | crd-conversion, crdupdater, f5-coremond, f5-fluentbit, f5-fluentd, f5-nsec-ips-daemon, f5-version-validator, tmm-img, tmrouted-img |
| CVE-2024-57360 | 2069681 | f5-fluentd |
| CVE-2024-58251 | 2215017 | f5dr-img-init |
| CVE-2024-6104 | 1641293, 1641301, 1641305, 1641309, 1641317, 1641321, 2069885, 2070645, 2071169 | cert-manager-controller, f5-debug-sidecar, f5-downloader, f5-license-helper, opentelemetry-collector-contrib, spk-cwc |
| CVE-2024-6119 | 1699493, 1699537, 1699573 | f5-blobd, f5-license-helper, rabbit |
| CVE-2024-6345 | 2214889 | f5-fluentd |
| CVE-2024-9143 | 2102721 | f5-fluentd |
| CVE-2024-9287 | 2069237, 2069893 | f5-license-helper, rabbit |
| CVE-2025-0395 | 2102629 | f5-fluentd |
| CVE-2025-0840 | 2069685 | f5-fluentd |
| CVE-2025-0913 | 2069241, 2069897, 2070109, 2070649, 2102501, 2102633, 2214441 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2025-0938 | 2069245 | rabbit |
| CVE-2025-10543 | 2213745, 2213865, 2214293, 2214637, 2214905 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, spk-cwc |
| CVE-2025-1147 | 2069689 | f5-fluentd |
| CVE-2025-1148 | 2069693 | f5-fluentd |
| CVE-2025-1153 | 2069765 | f5-fluentd |
| CVE-2025-1176 | 2069697 | f5-fluentd |
| CVE-2025-1178 | 2069701 | f5-fluentd |
| CVE-2025-1181 | 2069705 | f5-fluentd |
| CVE-2025-1182 | 2069709 | f5-fluentd |
| CVE-2025-13151 | 2215433 | baseos |
| CVE-2025-13281 | 2214965 | f5-dssm-upgrader |
| CVE-2025-1352 | 2071325 | f5-debug-sidecar |
| CVE-2025-13836 | 2215133, 2215141, 2215149, 2215157, 2215169, 2215177, 2215185, 2215197, 2215209, 2215345, 2215413, 2215421 | f5-blobd, f5-csm-qkview, f5-downloader, f5-fluentbit, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5dr-img, f5ing-tmm-pod-manager, spk-cwc, tmrouted-img |
| CVE-2025-1386 | 2070653 | opentelemetry-collector-contrib |
| CVE-2025-1390 | 2102637 | f5-fluentd |
| CVE-2025-1795 | 2069317, 2069977 | f5-license-helper, rabbit |
| CVE-2025-22866 | 2069249, 2069905, 2070113, 2070657, 2102509, 2102641, 2213689, 2214445 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2025-22868 | 2068341, 2069321, 2070037, 2070729, 2070793, 2102969 | cert-manager-webhook, crd-conversion, crdupdater, f5-debug-sidecar, f5-downloader, f5ing-tmm-pod-manager |
| CVE-2025-22869 | 2070041, 2102973, 2214621 | cert-manager-webhook, f5-debug-sidecar, f5-downloader |
| CVE-2025-22870 | 2068389, 2069325, 2069373, 2069601, 2069909, 2070117, 2070337, 2070661, 2070773, 2070861, 2070965, 2071025, 2071533, 2071773, 2217689 | cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, opentelemetry-collector-contrib |
| CVE-2025-22871 | 2069253, 2069913, 2070121, 2070665, 2102513, 2102645, 2214449 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2025-22872 | 2068397, 2069329, 2069381, 2069605, 2069917, 2070125, 2070345, 2070669, 2070781, 2070869, 2070973, 2071033, 2071541, 2071781, 2214129, 2214521, 2215081, 2217681 | cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-coremond, f5-csm-qkview, f5-downloader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5ing-tmm-pod-manager, opentelemetry-collector-contrib |
| CVE-2025-24294 | 2069713 | f5-fluentd |
| CVE-2025-25186 | 2069769 | f5-fluentd |
| CVE-2025-27219 | 2069717 | f5-fluentd |
| CVE-2025-27220 | 2069721 | f5-fluentd |
| CVE-2025-27221 | 2069725 | f5-fluentd |
| CVE-2025-29087 | 2069257, 2069921 | f5-license-helper, rabbit |
| CVE-2025-29088 | 2069261 | rabbit |
| CVE-2025-30204 | 2069797, 2070585, 2070737, 2070801, 2071109, 2214277 | crd-conversion, f5-debug-sidecar, f5-downloader, f5-license-helper, opentelemetry-collector-contrib |
| CVE-2025-30258 | 2102649 | f5-fluentd |
| CVE-2025-31115 | 2102653 | f5-fluentd |
| CVE-2025-3198 | 2069729 | f5-fluentd |
| CVE-2025-32988 | 2102657 | f5-fluentd |
| CVE-2025-32989 | 2102661 | f5-fluentd |
| CVE-2025-32990 | 2102665 | f5-fluentd |
| CVE-2025-40909 | 2102669 | f5-fluentd |
| CVE-2025-4516 | 2069281, 2069945 | f5-license-helper, rabbit |
| CVE-2025-4598 | 2069733 | f5-fluentd |
| CVE-2025-46394 | 2215069 | f5dr-img-init |
| CVE-2025-46706 | 2099593 | Not specified |
| CVE-2025-4673 | 2069289, 2069953, 2070129, 2070673, 2102545, 2102673, 2214453 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2025-47273 | 2069293, 2069669, 2069957 | f5-fluentd, f5-license-helper, rabbit |
| CVE-2025-47906 | 2069113, 2069801, 2070045, 2070589, 2102549, 2102677, 2214457 | cert-manager-webhook, f5-fluentd, f5-license-helper, f5-nsec-ips-daemon, f5ingress, opentelemetry-collector-contrib, rabbit |
| CVE-2025-47907 | 2102601, 2213673, 2214413 | f5-fluentd, f5-nsec-ips-daemon, f5ingress |
| CVE-2025-47912 | 2213625, 2213693, 2213749, 2213813, 2213869, 2213937, 2213985, 2214033, 2214089, 2214141, 2214189, 2214237, 2214297, 2214361, 2214461, 2214525, 2214573, 2214641, 2214697, 2214849, 2214909, 2214969, 2215021, 2215085 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-47914 | 2213629, 2213753, 2213873, 2214037, 2214301, 2214365, 2214465, 2214577, 2214645, 2214701, 2214913, 2215025, 2215089 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc |
| CVE-2025-5244 | 2069737 | f5-fluentd |
| CVE-2025-5245 | 2069741 | f5-fluentd |
| CVE-2025-54410 | 2070689 | opentelemetry-collector-contrib |
| CVE-2025-54479 | 2035257 | Not specified |
| CVE-2025-54500 | 2008497 | Not specified |
| CVE-2025-54805 | 2099601 | Not specified |
| CVE-2025-5702 | 2102681 | f5-fluentd |
| CVE-2025-58058 | 2071585 | f5-coremond |
| CVE-2025-58181 | 2213633, 2213757, 2213877, 2214041, 2214305, 2214369, 2214469, 2214581, 2214649, 2214705, 2214917, 2215029, 2215093 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-license-helper, f5dr-img-init, f5ingress, opentelemetry-collector-contrib, spk-cwc |
| CVE-2025-58183 | 2213617, 2213677, 2213733, 2213801, 2213857, 2213929, 2213977, 2214025, 2214081, 2214133, 2214181, 2214229, 2214281, 2214345, 2214417, 2214513, 2214565, 2214625, 2214689, 2214841, 2214893, 2214957, 2215009, 2215073 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-58185 | 2213637, 2213697, 2213761, 2213817, 2213885, 2213941, 2213989, 2214045, 2214093, 2214145, 2214193, 2214241, 2214309, 2214373, 2214477, 2214529, 2214585, 2214653, 2214709, 2214853, 2214921, 2214973, 2215033, 2215097 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-58186 | 2213641, 2213701, 2213765, 2213821, 2213889, 2213945, 2213993, 2214049, 2214097, 2214149, 2214197, 2214245, 2214313, 2214377, 2214481, 2214533, 2214589, 2214657, 2214713, 2214857, 2214925, 2214977, 2215037, 2215101 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-58187 | 2213645, 2213705, 2213769, 2213825, 2213893, 2213949, 2213997, 2214053, 2214101, 2214153, 2214201, 2214249, 2214317, 2214381, 2214485, 2214537, 2214593, 2214661, 2214717, 2214861, 2214929, 2214981, 2215041, 2215105 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-58188 | 2213649, 2213709, 2213773, 2213829, 2213897, 2213953, 2214001, 2214057, 2214105, 2214157, 2214205, 2214253, 2214321, 2214385, 2214489, 2214541, 2214597, 2214665, 2214721, 2214865, 2214933, 2214985, 2215045, 2215109 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-58189 | 2213653, 2213713, 2213777, 2213837, 2213901, 2213957, 2214005, 2214061, 2214109, 2214161, 2214209, 2214257, 2214325, 2214389, 2214493, 2214545, 2214601, 2214669, 2214725, 2214869, 2214937, 2214989, 2215049, 2215113 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-59781 | 2053545 | Not specified |
| CVE-2025-6020 | 2102685 | f5-fluentd |
| CVE-2025-6069 | 2069297, 2069961 | f5-license-helper, rabbit |
| CVE-2025-61723 | 2213657, 2213717, 2213781, 2213841, 2213905, 2213961, 2214009, 2214065, 2214113, 2214165, 2214213, 2214261, 2214329, 2214393, 2214497, 2214549, 2214605, 2214673, 2214729, 2214873, 2214941, 2214993, 2215053, 2215117 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-61724 | 2213661, 2213721, 2213785, 2213845, 2213909, 2213965, 2214013, 2214069, 2214117, 2214169, 2214217, 2214265, 2214333, 2214397, 2214501, 2214553, 2214609, 2214677, 2214733, 2214877, 2214945, 2214997, 2215057, 2215121 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-61725 | 2213665, 2213725, 2213789, 2213849, 2213913, 2213969, 2214017, 2214073, 2214121, 2214173, 2214221, 2214269, 2214337, 2214401, 2214505, 2214557, 2214613, 2214681, 2214737, 2214881, 2214949, 2215001, 2215061, 2215125 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-61727 | 2213669, 2213729, 2213793, 2213853, 2213917, 2213973, 2214021, 2214077, 2214125, 2214177, 2214225, 2214273, 2214341, 2214405, 2214509, 2214561, 2214617, 2214685, 2214741, 2214885, 2214953, 2215005, 2215065, 2215129 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-61729 | 2213621, 2213681, 2213737, 2213805, 2213861, 2213933, 2213981, 2214029, 2214085, 2214137, 2214185, 2214233, 2214285, 2214349, 2214421, 2214517, 2214569, 2214629, 2214693, 2214845, 2214897, 2214961, 2215013, 2215077 | cert-manager-cainjector, cert-manager-controller, cert-manager-startupapicheck, cert-manager-webhook, crd-conversion, crdupdater, f5-blobd, f5-csm-qkview, f5-debug-sidecar, f5-downloader, f5-dssm-store, f5-dssm-upgrader, f5-l4p-engine, f5-license-helper, f5-nsec-ips-daemon, f5-toda-tmstatsd, f5-version-validator, f5dr-img, f5dr-img-init, f5ing-tmm-pod-manager, f5ingress, opentelemetry-collector-contrib, rabbit, spk-cwc |
| CVE-2025-6297 | 2102725 | f5-fluentd |
| CVE-2025-63811 | 2214353 | opentelemetry-collector-contrib |
| CVE-2025-6395 | 2102689 | f5-fluentd |
| CVE-2025-6442 | 2069745 | f5-fluentd |
| CVE-2025-65637 | 2213741, 2214289, 2214633 | crd-conversion, f5-downloader, f5-license-helper |
| CVE-2025-68156 | 2214357 | opentelemetry-collector-contrib |
| CVE-2025-68973 | 2215429 | baseos |
| CVE-2025-6965 | 2069301 | rabbit |
| CVE-2025-7545 | 2069749 | f5-fluentd |
| CVE-2025-7546 | 2069753 | f5-fluentd |
| CVE-2025-7709 | 2069305, 2069969 | f5-license-helper, rabbit |
| CVE-2025-8058 | 2102693 | f5-fluentd |
| CVE-2025-8225 | 2069757 | f5-fluentd |
| CVE-2025-8732 | 2216569 | f5-debug-sidecar |
| CVE-2025-8869 | 2102697 | f5-fluentd |
| CVE-2025-8941 | 2102233, 2102333, 2102437, 2102569, 2102701, 2102829, 2102941, 2103205, 2103329 | crd-conversion, crdupdater, f5-coremond, f5-fluentbit, f5-fluentd, f5-nsec-ips-daemon, f5-version-validator, tmm-img, tmrouted-img |
| CVE-2025-9230 | 2102109, 2102237, 2102337, 2102441, 2102573, 2102705, 2102833, 2102945, 2103209, 2103333, 2103361 | baseos, crd-conversion, crdupdater, f5-coremond, f5-fluentbit, f5-fluentd, f5-nsec-ips-daemon, f5-version-validator, f5dr-img-init, tmm-img, tmrouted-img |
| CVE-2025-9231 | 2102865 | f5dr-img-init |
| CVE-2025-9232 | 2102869 | f5dr-img-init |
| CVE-2026-0989 | 2216557 | f5-debug-sidecar |
| CVE-2026-0990 | 2216561 | f5-debug-sidecar |
| CVE-2026-0992 | 2216565 | f5-debug-sidecar |
| GHSA-2464-8J7C-4CJM | 2213921 | spk-cwc |
| GHSA-2w8w-qhg4-f78j | 1641341, 2070677 | opentelemetry-collector-contrib |
| GHSA-87m9-rv8p-rgmg | 1641353 | opentelemetry-collector-contrib |
| GHSA-fv92-fjc5-jj9h | 2213925 | spk-cwc |
| GHSA-jq35-85cj-fj4p | 1641361 | opentelemetry-collector-contrib |
| GHSA-m425-mq94-257g | 1641373, 1641401 | cert-manager-webhook, opentelemetry-collector-contrib |
| GHSA-mhpq-9638-x6pw | 1641405, 2070681 | opentelemetry-collector-contrib |
| GHSA-r4pg-vg54-wxx4 | 2070981 | f5-version-validator |