Read the docs

KnowBe4

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

KnowBe4 records in CISA KEV

No KnowBe4 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Security Awareness Training 2 records LOW

Records

4 records

TI-2020-18980 CVE-2020-36845 · GHSA-rfcx-6p2f-m3vg

Open redirect in KnowBe4 Security Awareness Training

Priority LOW 33

The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2025-04-20 Fixed in 2020-01-10 CWE-601
TI-2024-19378 CVE-2024-29209 · GHSA-gx5g-rjjv-754q

Code injection in KnowBe4 Phish Alert Button for Outlook

Priority LOW 27

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine.

CVSS 3.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00374 Published 2024-05-07 Fixed in 1.10.12, 1.10.0 +4 CWE-94
TI-2024-19379 CVE-2024-29210 · GHSA-w2v7-qw4p-jjp9

Improper privilege management in KnowBe4 Phish Alert Button for Outlook

Priority LOW 15

A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities.

CVSS 3.0LOW 2.8 Local High privileges User interaction EPSS 0.00178 Published 2024-05-07 Fixed in 1.10.12, 1.10.0 +4 CWE-269
Open these records in search →