Description
SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent directory and over-write system files causing high impact on confidentiality integrity and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Print Service | SAPSPRINT 8.00, 8.10 | — |
Advisories 2
- NCSC-2025-0323 Kwetsbaarheden verholpen in SAP Producten NCSC-NL (Netherlands) · Oct 17, 2025
- WID-SEC-2025-2265 SAP Patchday Oktober 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 13, 2025