KnowBe4

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

KnowBe4 records in CISA KEV

No KnowBe4 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Security Awareness Training 2 records LOW

Records

2 records in Security Awareness Training · all components

TI-2020-18980 CVE-2020-36845 · GHSA-rfcx-6p2f-m3vg

Open redirect in KnowBe4 Security Awareness Training

LOW 33

The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00263 Published 2025-04-20 Fixed in 2020-01-10 CWE-601

TI-2020-18979 CVE-2020-36844 · GHSA-734j-rghv-fj5v

Cross-site scripting in KnowBe4 Security Awareness Training

LOW 27

The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00285 Published 2025-04-20 Fixed in 2020-01-10 CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	1
No CVSS	0