TOTVS

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

TOTVS records in CISA KEV

No TOTVS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2020-17568 CVE-2020-29134 · GHSA-6pvw-5765-4xq4

MEDIUM 60

The TOTVS Fluig platform allows path traversal through the parameter "file = ..

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.27844 Published 2021-03-05 No fix listed CWE-22

TI-2024-36795 CVE-2024-55210 · GHSA-6gv3-7gp2-wqgf

MEDIUM 50

An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass multi-factor authentication (MFA) via a crafted websocket message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00563 Published 2025-04-09 No fix listed CWE-290

TI-2023-05763 CVE-2023-6275 · GHSA-94vc-pmgm-jvw4

LOW 32

A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02379 Published 2023-11-24 No fix listed CWE-79

TI-2023-04340 CVE-2023-4710 · GHSA-qvw3-7pxq-j22x

LOW 28

A vulnerability classified as problematic was found in TOTVS RM 12.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00503 Published 2023-09-01 No fix listed CWE-79

TI-2025-08429 CVE-2025-9193 · GHSA-rxg6-h36v-7jcx

LOW 23

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00262 Published 2025-08-20 Fixed in 12.1.2410.274, 12.1.2502.178 +1 CWE-601

TI-2023-04339 CVE-2023-4709 · GHSA-fff7-753p-rxwc

LOW 12

A vulnerability classified as problematic has been found in TOTVS RM 12.1.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00398 Published 2023-09-01 No fix listed CWE-79