CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0., from 0.0.0 before 5.1...

4.8CVSS5.8AI score0.00204EPSS

Exploits0References1

ATTACKERKB•added 2025/06/26 1:33 p.m.•2 views

CVE-2025-6675

4.8CVSS5.8AI score0.00204EPSS

Exploits0References2Affected Software1

CVE•added 2025/06/26 1:33 p.m.•20 views

CVE-2025-6675

Summary: CVE-2025-6675 describes an authentication bypass in the Drupal Enterprise MFA - TFA for Drupal module. The issue allows bypassing authentication via an alternate path or channel. Affected versions include 0.0.0 through 4.8.0, 5.2.0 through 5.2.0, 0.0.0 through 5.0., and 0.0.0 through 5.1...

4.8CVSS7.3AI score0.00204EPSS

Exploits0References1Affected Software1

CNNVD•added 2025/06/26 12:0 a.m.•5 views

Drupal Enterprise MFA - TFA for Drupal 安全漏洞

Drupal Enterprise MFA - TFA for Drupal is a module plugin in the Drupal content management system from the Drupal community. A security vulnerability exists in Drupal Enterprise MFA - TFA for Drupal versions prior to 4.8.0, prior to 5.2.1, prior to 5.0., and prior to 5.1. that stems from an...

4.8CVSS6.8AI score0.00204EPSS

Exploits0References1

RedhatCVE•added 2025/05/16 5:12 p.m.•15 views

CVE-2025-47706

Authentication Bypass by Capture-replay vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Remote Services with Stolen Credentials.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

4.8CVSS7.2AI score0.00235EPSS

Exploits0References3

RedhatCVE•added 2025/05/16 5:11 p.m.•19 views

CVE-2025-47708

Cross-Site Request Forgery CSRF vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Cross Site Request Forgery.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

8.8CVSS7.1AI score0.00171EPSS

Exploits0References3

RedhatCVE•added 2025/05/16 5:11 p.m.•15 views

CVE-2025-47707

7.5CVSS7AI score0.00353EPSS

Exploits0References3

RedhatCVE•added 2025/05/16 5:11 p.m.•15 views

CVE-2025-47709

Missing Authorization vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Forceful Browsing.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.7.0, from 5.0.0 before 5.2.0...

6.5CVSS7AI score0.00207EPSS

Exploits0References3