tag
Mobileiron-Core
CVE-2023-35078
network
CRITICAL 9.8
KEV
Ransomware
EPSS 100%
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote API Access (CVE-2023-35078)
Ivanti Endpoint Manager Mobile (EPMM, formerly MobileIron Core) fails to enforce authentication on specific paths beneath its /mifs/aad/api/ administrative API. An unauthenticated remote attacker can issue a plain GET…
Unverified
2026-08-09