CVE-2025-30398: Nuance PowerScribe 360 Information Disclosure Vulnerability

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-11-11 · updated 2026-10-18
Weakness: CWE-862

Description

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Affected products

Microsoft Nuance Powerscribe 360: 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6 (+3)
Microsoft Nuance Powerscribe One: 2019.1, 2019.2, 2019.3, 2019.4, 2019.5, 2019.6 (+5)
Microsoft Nuance PowerScribe 360 version 4.0.1: from 4.0.1 before 7.0.111.66 — fixed in 7.0.111.66
Microsoft Nuance PowerScribe 360 version 4.0.2: from 4.0.2 before 7.0.154.16 — fixed in 7.0.154.16
Microsoft Nuance PowerScribe 360 version 4.0.3: from 4.0.3 before 7.0.197.8 — fixed in 7.0.197.8
Microsoft Nuance PowerScribe 360 version 4.0.4: from 4.0.4 before 7.0.212.9 — fixed in 7.0.212.9
Microsoft Nuance PowerScribe 360 version 4.0.5: from 4.0.5 before 7.0.243.17 — fixed in 7.0.243.17
Microsoft Nuance PowerScribe 360 version 4.0.6: from 4.0.6 before 7.0.277.26 — fixed in 7.0.277.26
Microsoft Nuance PowerScribe 360 version 4.0.7: from 4.0.7 before 7.0.316.9 — fixed in 7.0.316.9
Microsoft Nuance PowerScribe 360 version 4.0.8: from 4.0.8 before 7.0.427.13 — fixed in 7.0.427.13
Microsoft Nuance PowerScribe 360 version 4.0.9: from 4.0.9 before 7.0.528.18 — fixed in 7.0.528.18
Microsoft Nuance PowerScribe One version 2019.1: from 2019.1 before 2019.1.96.5 — fixed in 2019.1.96.5
Microsoft Nuance PowerScribe One version 2019.10: from 2019.10 before 2019.10.36.4 — fixed in 2019.10.36.4
Microsoft Nuance PowerScribe One version 2019.2: from 2019.2 before 2019.2.9.8 — fixed in 2019.2.9.8
Microsoft Nuance PowerScribe One version 2019.3: from 2019.3 before 2019.3.16.20 — fixed in 2019.3.16.20
Microsoft Nuance PowerScribe One version 2019.4: from 2019.4 before 2019.4.9.16 — fixed in 2019.4.9.16
Microsoft Nuance PowerScribe One version 2019.5: from 2019.5 before 2019.5.14.39 — fixed in 2019.5.14.39
Microsoft Nuance PowerScribe One version 2019.6: from 2019.6 before 2019.6.36.39 — fixed in 2019.6.36.39
Microsoft Nuance PowerScribe One version 2019.7: from 2019.7 before 2019.7.107.21 — fixed in 2019.7.107.21
Microsoft Nuance PowerScribe One version 2019.8: from 2019.8 before 2019.8.43.15 — fixed in 2019.8.43.15
Microsoft Nuance PowerScribe One version 2019.9: from 2019.9 before 2019.9.31.19 — fixed in 2019.9.31.19
Microsoft PowerScribe One version 2023.1 SP2 Patch 7: from 2023.1 before 2023.2.3027.0 — fixed in 2023.2.3027.0

How to fix

Upgrade to a fixed version: Microsoft Nuance PowerScribe 360 version 4.0.1 7.0.111.66; Microsoft Nuance PowerScribe 360 version 4.0.2 7.0.154.16; Microsoft Nuance PowerScribe 360 version 4.0.3 7.0.197.8; Microsoft Nuance PowerScribe 360 version 4.0.4 7.0.212.9; Microsoft Nuance PowerScribe 360 version 4.0.5 7.0.243.17; Microsoft Nuance PowerScribe 360 version 4.0.6 7.0.277.26; Microsoft Nuance PowerScribe 360 version 4.0.7 7.0.316.9; Microsoft Nuance PowerScribe 360 version 4.0.8 7.0.427.13; Microsoft Nuance PowerScribe 360 version 4.0.9 7.0.528.18; Microsoft Nuance PowerScribe One version 2019.1 2019.1.96.5; Microsoft Nuance PowerScribe One version 2019.10 2019.10.36.4; Microsoft Nuance PowerScribe One version 2019.2 2019.2.9.8. Check the vendor advisory for mitigations.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398

Get alerted when CVE-2025-30398 or the next vulnerability affects your stack