CVE-2020-8503: Biscom Secure File Transfer

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-upload feature. This is fixed in 5.1.1068 and 6.0.1004.

Affected products

• Biscom Secure File Transfer: from 5.0.1050, up to and including 5.1.1067; from 6.0.1000, up to and including 6.0.1003

Published 2020-01-31. Last modified 2026-06-17.