CVE-2025-30398 - CVE House

Back to Database

Status published High CVE-2025-30398

Nuance PowerScribe 360 Information Disclosure Vulnerability

8.1 CVSS

Vulnerability Description

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-30398

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398

More from Microsoft

View All →

Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

EOL ASP.NET Core Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Partner Center Elevation of Privilege Vulnerability

Affected Vendor

Microsoft

View all reports →

Affected Software

Nuance PowerScribe 360 version 4.0.1, Nuance PowerScribe 360 version 4.0.2, Nuance PowerScribe 360 version 4.0.3, Nuance PowerScribe 360 version 4.0.4, Nuance PowerScribe 360 version 4.0.5, Nuance PowerScribe 360 version 4.0.6, Nuance PowerScribe 360 version 4.0.7, Nuance PowerScribe 360 version 4.0.8, Nuance PowerScribe 360 version 4.0.9, Nuance PowerScribe One version 2019.1, Nuance PowerScribe One version 2019.10, Nuance PowerScribe One version 2019.2, Nuance PowerScribe One version 2019.3, Nuance PowerScribe One version 2019.4, Nuance PowerScribe One version 2019.5, Nuance PowerScribe One version 2019.6, Nuance PowerScribe One version 2019.7, Nuance PowerScribe One version 2019.8, Nuance PowerScribe One version 2019.9, PowerScribe One version 2023.1 SP2 Patch 7

Vulnerable Versions:

4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 2019.1, 2019.10, 2019.2, 2019.3, 2019.4, 2019.5, 2019.6, 2019.7, 2019.8, 2019.9, 2023.1

Timeline

Official Publish: November 11th, 2025

Last Modified: February 13th, 2026

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1078 Valid Accounts

T1531 Account Access Removal