Known vulnerabilities in Migration Toolkit for Runtimes

Vendor: Red Hat Inc.
Software: Migration Toolkit for Runtimes
Software CPE: cpe:2.3:a:red_hat:mtr:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 203
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Migration Toolkit for Runtimes Migration Toolkit for Runtimes is affected by 203 known vulnerabilities: 42 high, 105 medium, 56 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 1.2.7 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 159 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94558 - Improper input validation
CVE-2024-21144		 CWE-20 Low
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718192
and 114 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 1.2.7 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 1.2.7 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 1.2.7 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235		 CWE-61 Low
Available
No
 1.2.7 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more
#VU88798 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-1132		 CWE-22 Medium
No
No
 1.2.6 17.04.2024 SB20240417142
SB20240417148
SB20240417149
and 8 more
#VU88155 - Improper input validation
CVE-2023-4639		 CWE-20 Medium
No
No
 1.2.6 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 1.2.7 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87850 - Missing Release of Resource after Effective Lifetime
CVE-2024-2398		 CWE-772 Medium
No
No
 1.2.7 27.03.2024 SB2024032713
SB2024032740
SB2024032744
and 106 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 1.2.7 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU85342 - Improper input validation
CVE-2023-48631		 CWE-20 Low
No
No
 1.2.6 12.01.2024 SB2024011226
SB2024011227
SB2024030510
and 4 more
#VU84457 - Improper input validation
CVE-2023-26364		 CWE-20 Medium
No
No
 1.2.6 15.12.2023 SB2023121517
SB2024042435
SB2024042436
and 8 more
#VU80792 - Improper input validation
CVE-2023-36479		 CWE-20 Medium
No
No
 1.2.6 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 1.2.7 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 1.2.7 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more


Showing elements 1 - 20 out of 203