Introduction
Attackers can overwrite critical system files on SAP Print Service deployments without authentication. The result can be data loss, service disruption, and potentially full system compromise. SAP Print Service (SAPSprint) is widely used to connect SAP Business Technology Platform applications to on-premises printers, so this vulnerability is relevant to any enterprise with SAP cloud-to-local print integration.
About SAP: SAP SE is one of the largest enterprise software vendors in the world and runs business operations for more than 400,000 customers. Its platforms are central to finance, supply chain, HR, and analytics in organizations of all sizes. A security flaw in an SAP product can affect many industries at once.
Technical Information
CVE-2025-42937 is a path traversal vulnerability in SAP Print Service (SAPSprint). The service does not sufficiently validate user-supplied path information. The vulnerability is categorized as CWE-35, which covers path traversal using sequences like .../...// (doubled triple dot slash). This technique can bypass basic filtering that only looks for standard ../ patterns. An unauthenticated attacker can submit crafted path input, traverse parent directories, and overwrite system files that the SAP Print Service process can access. The attack compromises confidentiality, integrity, and availability. Public sources do not currently include further technical details, code snippets, or endpoint specifics.
Affected Systems and Versions
- Product: SAP Print Service (SAPSprint)
- No specific version numbers or version ranges have been publicly disclosed as affected.
- Vulnerable configurations: Any SAP Print Service deployment that processes user-supplied path information without sufficient validation.
Vendor Security History
SAP has a documented history of path traversal vulnerabilities in its core products, including:
- CVE-2017-12637 (SAP NetWeaver AS Java): Path traversal allowing file disclosure and credential theft, later added to CISA's Known Exploited Vulnerabilities catalog (analysis).
- CVE-2025-30014 (SAP Capital Yield Tax Management): Directory traversal due to insufficient path validation.
SAP runs a monthly patch cycle and works with external researchers. Critical vulnerabilities still surface, which reflects how complex SAP's product portfolio is.
