CVE-2016-10710

PoC —

CVSS 3.0

8.1 high

EPSS

1%p64

Published

Jan 25, 2018 (Jan 25, 2018)

Modified

Jun 17, 2026

Description

Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix.

Vendors: biscom
Products: secure file transfer
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.