CVE-2025-30398

Nuance PowerScribe 360 Information Disclosure Vulnerability

State: Published
Severity: 8.1 High
Published: Nov 11, 2025
Updated: Feb 13, 2026
Reserved: Mar 21, 2025

Description

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C	microsoft

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
Nuance PowerScribe 360 version 4.0.1Microsoft	4.0.1 to before 7.0.111.66Affected
Nuance PowerScribe 360 version 4.0.2Microsoft	4.0.2 to before 7.0.154.16Affected
Nuance PowerScribe 360 version 4.0.3Microsoft	4.0.3 to before 7.0.197.8Affected
Nuance PowerScribe 360 version 4.0.4Microsoft	4.0.4 to before 7.0.212.9Affected
Nuance PowerScribe 360 version 4.0.5Microsoft	4.0.5 to before 7.0.243.17Affected
Nuance PowerScribe 360 version 4.0.6Microsoft	4.0.6 to before 7.0.277.26Affected
Nuance PowerScribe 360 version 4.0.7Microsoft	4.0.7 to before 7.0.316.9Affected
Nuance PowerScribe 360 version 4.0.8Microsoft	4.0.8 to before 7.0.427.13Affected
Nuance PowerScribe 360 version 4.0.9Microsoft	4.0.9 to before 7.0.528.18Affected
Nuance PowerScribe One version 2019.1Microsoft	2019.1 to before 2019.1.96.5Affected
Nuance PowerScribe One version 2019.10Microsoft	2019.10 to before 2019.10.36.4Affected
Nuance PowerScribe One version 2019.2Microsoft	2019.2 to before 2019.2.9.8Affected
Nuance PowerScribe One version 2019.3Microsoft	2019.3 to before 2019.3.16.20Affected
Nuance PowerScribe One version 2019.4Microsoft	2019.4 to before 2019.4.9.16Affected
Nuance PowerScribe One version 2019.5Microsoft	2019.5 to before 2019.5.14.39Affected
Nuance PowerScribe One version 2019.6Microsoft	2019.6 to before 2019.6.36.39Affected
Nuance PowerScribe One version 2019.7Microsoft	2019.7 to before 2019.7.107.21Affected
Nuance PowerScribe One version 2019.8Microsoft	2019.8 to before 2019.8.43.15Affected
Nuance PowerScribe One version 2019.9Microsoft	2019.9 to before 2019.9.31.19Affected
PowerScribe One version 2023.1 SP2 Patch 7Microsoft	2023.1 to before 2023.2.3027.0Affected

References

Nuance PowerScribe 360 Information Disclosure Vulnerabilityvendor-advisorypatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.