Security readout for executives and security teams
Plain-English summary
This is a Microsoft SharePoint Server security feature bypass. A logged-in attacker over the network could cause limited integrity impact. It is not listed as CISA KEV, and the source bundle does not show public exploitation. Business urgency is normal patch-cycle remediation for affected SharePoint Server 2019 and Subscription Edition deployments.
Executive priority
Handle in the regular vulnerability management cycle, with priority for SharePoint systems used by large user populations. The available evidence supports moderate urgency because exploitation is not documented in the bundle, but Microsoft lists an official remediation.
Technical view
CVSS 3.1 score is 4.3: AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. Microsoft classifies it as a security feature bypass; CWE-200 is recorded. Scope is unchanged, with no confidentiality or availability impact in the vector and low integrity impact. Remediation is available according to RL:O.
Likely exposure
Exposure is limited to Microsoft SharePoint Server 2019 and Microsoft SharePoint Server Subscription Edition version 16.0.0 as listed in the source bundle. The vulnerability requires low privileges, so environments with broad authenticated user access should verify patch status.
Exploitation context
The source bundle does not identify active exploitation, and KEV status is false. The CVSS exploit maturity is E:U, meaning unproven in the supplied data. Treat this as a known vendor-advised issue requiring remediation, not as an emergency exploitation event.
Researcher notes
Do not infer exploitability beyond the CVSS vector and Microsoft classification. The supplied evidence gives affected product families, a medium score, and remediation availability, but no technical root cause, proof of concept, or observed exploitation detail.
Mitigation direction
- Review Microsoft guidance for CVE-2023-33165 and apply the listed SharePoint security update.
- Prioritize systems reachable by many authenticated users or external identities.
- Confirm SharePoint Server 2019 and Subscription Edition inventories are current.
- Monitor Microsoft advisory updates for revised affected builds or remediation details.
Validation and detection
- Identify SharePoint Server 2019 and Subscription Edition deployments in the environment.
- Compare installed build and patch status against Microsoft CVE-2023-33165 guidance.
- Confirm affected systems received the relevant Microsoft security update.
- Document any unpatched systems, owners, exposure, and remediation dates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-200: Information exposure and cloud metadata lookup
Information exposure and SSRF weaknesses can make discovery, cloud metadata, and credential material review relevant. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-33165 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 4.3 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C2.81.4Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
4.3MediumVector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C
Source materials
- CVE List V5 sourceCVE List V5
- Microsoft SharePoint Server Security Feature Bypass VulnerabilityCVE reference · vendor-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Exposure of Sensitive Information to an Unauthorized Actor
Exposure of Sensitive Information to an Unauthorized Actor represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.