Advisories · Technology

Enterprise MFA - TFA for Drupal.

Every CVE that names Enterprise MFA - TFA for Drupal among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-6675 CVE record

CVSS 4.8 Medium

Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082
- Enterprise MFA - TFA for Drupal
- Authentication bypass
Not analysed yet 26 Jun 2025
CVE-2025-47710 CVE record

CVSS 7.4 High

Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056
- Enterprise MFA - TFA for Drupal
- Authentication bypass
Not analysed yet 14 May 2025
CVE-2025-47709 CVE record

CVSS 6.5 Medium

Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055
- Enterprise MFA - TFA for Drupal
- Broken access control
Not analysed yet 14 May 2025
CVE-2025-47708 CVE record

CVSS 8.8 High

Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054
- Enterprise MFA - TFA for Drupal
- Cross-site request forgery (CSRF)
Not analysed yet 14 May 2025
CVE-2025-47707 CVE record

CVSS 7.5 High

Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053
- Enterprise MFA - TFA for Drupal
- Authentication bypass
Not analysed yet 14 May 2025
CVE-2025-47706 CVE record

CVSS 4.8 Medium

Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-052
- Enterprise MFA - TFA for Drupal
- Authentication bypass
Not analysed yet 14 May 2025