PT-2025-41843 · Sap · Sapsprint+1

Published 2025-10-14 · Updated 2025-10-19 · CVE-2025-42937

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Print Service (SAPSprint) (affected versions not specified)

Description SAP Print Service (SAPSprint) does not adequately validate path information provided by users. This allows an unauthenticated attacker to traverse directories and overwrite system files, potentially impacting the confidentiality, integrity, and availability of the application. The vulnerability enables directory traversal attacks due to insufficient input validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-35

Related Identifiers

CVE-2025-42937

Affected Products

Sap Print Service

Sapsprint

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-42937 · Security Note
• https://twitter.com/CveTodo/status/1977909738386899291 · Twitter Post
• https://t.me/cveNotify/138486 · Telegram Post
• https://twitter.com/ZeroPathLabs/status/1978049572921311419 · Twitter Post
• https://twitter.com/CVEnew/status/1977903149932302368 · Twitter Post
• https://twitter.com/haseebgakhar/status/1978546099389387208 · Twitter Post
• https://twitter.com/CCBalert/status/1978155949899542710 · Twitter Post
• https://t.me/CVEtracker/34824 · Telegram Post
• https://twitter.com/CveFindCom/status/1977897207383703826 · Twitter Post
• https://twitter.com/cracbot/status/1979865148568260615 · Twitter Post
• https://me.sap.com/notes/3630595 · Note
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/VulmonFeeds/status/1977938846433042872 · Twitter Post