KnowBe4 vulnerabilities

4 published CVEs name KnowBe4 among the affected products.

Critical 0High 0Medium 3Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2020-36845
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before…
KnowBe4 · Security Awareness Training
Medium5.3
CVE-2020-36844
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to…
KnowBe4 · Security Awareness Training
Medium6.1
CVE-2024-29209
A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely…
KnowBe4 · Phish Alert Button (PAB) for Outlook
Medium6.0
CVE-2024-29210
A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management…
KnowBe4 · Phish Alert Button (PAB) for Outlook
Low2.8