CVE-2025-30398: Nuance PowerScribe 360 Information Disclosure Vulnerability
Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.
Other sources
Nuance PowerScribe 360 Information Disclosure Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.10.36.4 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.9.31.19 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.197.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.8.43.15 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2023.2.3027.0 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.5.14.39 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.7.107.21 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.6.36.39 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.4.9.16 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.212.9 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.111.66 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.2.9.8 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.1.96.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.316.9 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2019.3.16.20 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.528.18 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.277.26 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.154.16 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.427.13 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 7.0.243.17
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30398?
CVE-2025-30398 is classified as a high-severity vulnerability due to its potential for unauthorized information disclosure.
How do I fix CVE-2025-30398?
The recommended fix for CVE-2025-30398 is to update to the latest patched version of Nuance PowerScribe as specified by Microsoft.
What products are affected by CVE-2025-30398?
CVE-2025-30398 affects multiple versions of Nuance PowerScribe, including PowerScribe One and PowerScribe 360.
What kind of information can be disclosed due to CVE-2025-30398?
CVE-2025-30398 allows an unauthorized attacker to disclose sensitive information over a network.
When was CVE-2025-30398 disclosed?
CVE-2025-30398 was disclosed as a vulnerability in 2025.