Directory Traversal Vulnerability in SAP Print Service by SAP

CVE-2025-42937

What is CVE-2025-42937?

An incomplete validation of user-provided path information in SAP Print Service allows unauthenticated attackers to exploit the service. By traversing to the parent directory, it is possible for them to overwrite critical system files, leading to significant compromises in application confidentiality, integrity, and availability. Organizations utilizing SAP Print Service should apply the recommended security patches to mitigate risks associated with this vulnerability.

References