This vulnerability results from improper authorization in Microsoft Office SharePoint, allowing an attacker with legitimate access to execute code over the network. The flaw permits arbitrary code to run with the privileges of the SharePoint account, potentially compromising the confidentiality, integrity, or availability of the affected servers.

Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, and Microsoft SharePoint Server Subscription Edition are impacted. Version details are not specified, so all current releases of these products are potentially vulnerable.

The CVSS base score of 8 signals a high severity issue. Although the EPSS score is unavailable and the vulnerability is not listed in CISA KEV, the attack vector is network-based and only requires an authorized account. Successful exploitation would grant an attacker full control over the SharePoint server, making this a significant risk for organizations that host sensitive data.