TOTVS

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

TOTVS records in CISA KEV

No TOTVS vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Framework (linha Protheus) · all components

TI-2024-36795 CVE-2024-55210 · GHSA-6gv3-7gp2-wqgf

MEDIUM 50

An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass multi-factor authentication (MFA) via a crafted websocket message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00563 Published 2025-04-09 No fix listed CWE-290