Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: KnowBe4 PasswordIQ (PIQ) Client, Second Chance Client 1.0.0, 1.0.16 and 2 more versions Clear all filters
TI-2024-19378 CVE-2024-29209 · GHSA-gx5g-rjjv-754q

Code injection in KnowBe4 Phish Alert Button for Outlook

Priority LOW 27

A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine.

CVSS 3.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00374 Published 2024-05-07 Fixed in 1.10.12, 1.10.0 +4 CWE-94
TI-2024-19379 CVE-2024-29210 · GHSA-w2v7-qw4p-jjp9

Improper privilege management in KnowBe4 Phish Alert Button for Outlook

Priority LOW 15

A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities.

CVSS 3.0LOW 2.8 Local High privileges User interaction EPSS 0.00178 Published 2024-05-07 Fixed in 1.10.12, 1.10.0 +4 CWE-269