Enterprise Mfa - Tfa For Drupal (Drupal) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-06-26. Vendor: Drupal.

CVEs of Enterprise Mfa - Tfa For Drupal

• CVE-2025-6675 - CVSS 4.8 (medium), 2025-06-26: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue…
• CVE-2025-47708 - CVSS 8.8 (high), 2025-05-14: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA…
• CVE-2025-47710 - CVSS 7.4 (high), 2025-05-14: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue…
• CVE-2025-47709 - CVSS 6.5 (medium), 2025-05-14: Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal:…
• CVE-2025-47707 - CVSS 7.5 (high), 2025-05-14: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue…
• CVE-2025-47706 - CVSS 4.8 (medium), 2025-05-14: Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue…