Vulnerabilities

TI-2025-08429 CVE-2025-9193 · GHSA-rxg6-h36v-7jcx

TOTVS Portal Meu RH Password Reset redirect

LOW 23

A flaw has been found in TOTVS Portal Meu RH up to 12.1.17.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00262 Published 2025-08-20 Fixed in 12.1.2410.274, 12.1.2502.178 +1 CWE-601

TI-2024-36795 CVE-2024-55210 · GHSA-6gv3-7gp2-wqgf

MEDIUM 50

An issue in TOTVS Framework (Linha Protheus) 12.1.2310 allows attackers to bypass multi-factor authentication (MFA) via a crafted websocket message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00563 Published 2025-04-09 No fix listed CWE-290

TI-2023-05763 CVE-2023-6275 · GHSA-94vc-pmgm-jvw4

LOW 32

A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02379 Published 2023-11-24 No fix listed CWE-79

TI-2023-04340 CVE-2023-4710 · GHSA-qvw3-7pxq-j22x

LOW 28

A vulnerability classified as problematic was found in TOTVS RM 12.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00503 Published 2023-09-01 No fix listed CWE-79

TI-2023-04339 CVE-2023-4709 · GHSA-fff7-753p-rxwc

LOW 12

A vulnerability classified as problematic has been found in TOTVS RM 12.1.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00398 Published 2023-09-01 No fix listed CWE-79

TI-2020-17568 CVE-2020-29134 · GHSA-6pvw-5765-4xq4

MEDIUM 60

The TOTVS Fluig platform allows path traversal through the parameter "file = ..

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.27844 Published 2021-03-05 No fix listed CWE-22