Skip to content

Product

TOTVS RM vulnerabilities

2 published CVES affecting TOTVS RM, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
1
Low
1
Unscored
0
CISA KEV
0

Latest TOTVS RM CVEs

Newest publication first

  1. CVE-2023-4710 TOTVS RM Portal cross site scripting

    Published
    MediumCVSS 6.1 EPSS 0.50%

    A vulnerability classified as problematic was found in TOTVS RM 12.1. Affected by this vulnerability is an unknown functionality of the component Portal. The manipulation of the argument d leads to cross site scripting. The attack can be launched remotely. The identifier VDB-2385...

  2. CVE-2023-4709 TOTVS RM Portal Login.aspx cross site scripting

    Published
    LowCVSS 2.3 EPSS 0.40%

    A vulnerability classified as problematic has been found in TOTVS RM 12.1. Affected is an unknown function of the file Login.aspx of the component Portal. The manipulation of the argument VIEWSTATE leads to cross site scripting. It is possible to launch the attack remotely. The c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.