{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T14:04:01.976","vulnerabilities":[{"cve":{"id":"CVE-2016-10710","sourceIdentifier":"cve@mitre.org","published":"2018-01-25T23:29:00.240","lastModified":"2026-06-17T00:40:12.600","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Biscom Secure File Transfer (SFT) 5.0.1000 through 5.0.1048 does not validate the dataFieldId value, and uses sequential numbers, which allows remote authenticated users to overwrite or read files via crafted requests. Version 5.0.1050 contains the fix."},{"lang":"es","value":"Biscom Secure File Transfer (SFT) desde la versión 5.0.1000 hasta la 5.0.1048 no valida el valor dataFieldId y utiliza números secuenciales, lo que permite que los usuarios autenticados remotos sobrescriban o lean archivos mediante peticiones manipuladas. La versión 5.0.1050 contiene la solución."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":5.2}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","baseScore":6.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.0,"impactScore":6.4,"acInsufInfo":true,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-20"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:biscom:secure_file_transfer:*:*:*:*:*:*:*:*","versionStartIncluding":"5.0.1000","versionEndIncluding":"5.0.1048","matchCriteriaId":"B7DE2CAB-2EE4-40FB-AC10-D3797E07E074"}]}]}],"references":[{"url":"http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/","source":"cve@mitre.org","tags":["Exploit","Technical Description","Third Party Advisory"]},{"url":"http://threat.tevora.com/biscom-secure-file-transfer-arbitrary-file-download/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Technical Description","Third Party Advisory"]}]}}]}