CVE-2025-42937 — Directory Traversal vulnerability in SAP Print Service

CVE-2025-42937

Directory Traversal vulnerability in SAP Print Service PUBLISHED

Description (CNA)

SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Print Service	affected SAPSPRINT 8.00; affected 8.10

CWE

CWE-35

References

https://me.sap.com/notes/3630595
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.