CVE Catalog

CVE-2025-30398

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.76%

51th percentile - higher than 51% of all known CVEs

Summary

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Risk Assessment

The risk involves potential leakage of sensitive medical data or other confidential information stored in the system, which may violate regulatory compliance and patient trust.

Recommendation

Immediately update Nuance PowerScribe to the latest patched version and implement authentication and authorization mechanisms for all network interfaces.

Other vulnerabilities in Nuance PowerScribe

Original NVD description (English source)

Missing authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS