Approved changes feed: RSS · Atom

cpe:2.3:a:drupal:enterprise_mfa_-_tfa_for_drupal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDrupal (5a354f1f-83c2-5c0e-b1bc-3ae1f55812de)
ProductEnterprise Mfa Tfa For Drupal (49ed8040-1ebe-5f7d-b9a7-8dbee4e910c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6675 vulnerable 2026-06-08 07:43:15.850838 Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-082
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0.*, from 0.0.0 before 5.1.*.
Published: 2025-06-26T13:33:35.019Z
Updated: 2026-02-26T17:50:22.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47710 vulnerable 2026-06-08 07:27:14.758465 Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-056
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
Published: 2025-05-14T17:03:48.714Z
Updated: 2025-05-19T14:31:38.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47709 vulnerable 2026-06-08 07:27:14.758169 Enterprise MFA - TFA for Drupal - Critical - Access bypass - SA-CONTRIB-2025-055
Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
Published: 2025-05-14T17:03:28.895Z
Updated: 2025-05-19T14:29:13.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47708 vulnerable 2026-06-08 07:27:14.757769 Enterprise MFA - TFA for Drupal - Critical - Cross Site Request Forgery - SA-CONTRIB-2025-054
Cross-Site Request Forgery (CSRF) vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
Published: 2025-05-14T17:03:14.838Z
Updated: 2025-05-20T16:17:25.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47707 vulnerable 2026-06-08 07:27:14.757299 Enterprise MFA - TFA for Drupal - Moderately critical - Access bypass - SA-CONTRIB-2025-053
Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0.
Published: 2025-05-14T17:03:02.330Z
Updated: 2025-05-15T14:29:37.021Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47706 vulnerable 2026-06-08 07:27:14.756236 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.