The vulnerability in Microsoft SharePoint Server Subscription Edition arises from an observable discrepancy in Office SharePoint that permits an authorized attacker to tamper with data over a network. This flaw effectively undermines data integrity for users with legitimate access, allowing them to alter documents, configuration settings, or other stored information without detection. The identified weakness corresponds to CWE-203.

Affected product is Microsoft SharePoint Server Subscription Edition. Specific version details are not disclosed in the provided data, so administrators should confirm that all deployments of SharePoint Server Subscription Edition are running the most recent updates released by Microsoft.

The CVSS score of 6.8 indicates a medium risk level. No EPSS score is available, so the probability of exploitation cannot be quantified, and the vulnerability is not listed in CISA KEV. Attackers need authorized network access; the flaw can be exploited over the network once the attacker has legitimate credentials or elevated permissions. Because the vulnerability requires authorized access, the potential impact is limited to users or applications that already have the necessary privileges.