CVE-2025-30398: Microsoft Nuance Powerscribe 360

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Affected products

• Microsoft Nuance Powerscribe 360: version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; version 4.0.6 only; …
• Microsoft Nuance Powerscribe One: version 2019.1 only; version 2019.2 only; version 2019.3 only; version 2019.4 only; version 2019.5 only; version 2019.6 only; …

Published 2025-11-11. Last modified 2026-06-29.