CVE-2017-5241

Name: CVE-2017-5241
Creator: NVD / NIST
Published: 2017-06-28T13:29:00.187+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.88%

Last modified Jun 17, 2026

CVE-2017-5241 is a vulnerability of currently unknown severity. Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the "Name" and "Description" fields of a Workspace, as well as the "Description" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025.. EPSS estimates a 0.88% chance of exploitation in the next 30 days.

Description

Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in the "Name" and "Description" fields of a Workspace, as well as the "Description" field of a File Details pane of a file stored in a Workspace. This issue has been resolved in version 5.1.1025.

Metrics

EPSS Probability

0.88%

54.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-79

Affected Software

Vendor	Product	Versions
Biscom	Secure File Transfer	<= 5.1.1015

References

http://www.securityfocus.com/bid/99341Third Party Advisory, VDB Entry
https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241Exploit, Third Party Advisory, VDB Entry
https://cve.biscom.com/bis-sft-cv-003/
http://www.securityfocus.com/bid/99341Third Party Advisory, VDB Entry
https://community.rapid7.com/community/infosec/blog/2017/06/27/r7-2017-06-biscom-sftp-xss-cve-2017-5241Exploit, Third Party Advisory, VDB Entry
https://cve.biscom.com/bis-sft-cv-003/

Timeline

Published: Jun 28, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-5241?

How severe is CVE-2017-5241?

Severity scoring for CVE-2017-5241 is pending analysis. The EPSS model estimates a 0.88% probability of exploitation in the next 30 days.

How do I fix CVE-2017-5241?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-5241?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST