CVE-2025-42937: Directory Traversal vulnerability in SAP Print Service
SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-42937?
CVE-2025-42937 is considered a high severity vulnerability due to its potential impact on confidentiality, integrity, and availability.
How do I fix CVE-2025-42937?
To remediate CVE-2025-42937, ensure that SAP Print Service applies adequate path validation to prevent directory traversal attacks.
What type of attack can exploit CVE-2025-42937?
CVE-2025-42937 can be exploited by unauthenticated attackers to perform directory traversal and overwrite system files.
Which software is affected by CVE-2025-42937?
CVE-2025-42937 affects the SAP Print Service.
What are the potential consequences of CVE-2025-42937?
Exploitation of CVE-2025-42937 can lead to significant disruption and compromise of system confidentiality, integrity, and availability.