KnowBe4
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PasswordIQ (PIQ) Client | 2 | – | May 7, 2024 |
| Phish Alert Button (PAB) for Outlook | 2 | – | May 7, 2024 |
| Second Chance Client | 2 | – | May 7, 2024 |
| Security Awareness Training | 2 | – | Apr 20, 2025 |
| Phish Alert Button (PAB) f | 1 | – | May 7, 2024 |
Exploited and recent CVEs
- CVE-2020-36845 The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that 0.3%
- CVE-2020-36844 The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL. 0.3%
- CVE-2024-29209 A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. 0.4%
- CVE-2024-29209 A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. 0.4%
- CVE-2024-29209 A medium severity vulnerability has been identified in the update mechanism of the Phish Alert Button for Outlook, which could allow an attacker to remotely execute arbitrary code on the host machine. 0.4%
- CVE-2024-29210 A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities. This vulnerability allow 0.2%
- CVE-2024-29210 A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities. This vulnerability allow 0.2%
- CVE-2024-29210 A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities. This vulnerability allow 0.2%
- CVE-2024-29210 A local privilege escalation (LPE) vulnerability has been identified in Phish Alert Button for Outlook (PAB), specifically within its configuration management functionalities. This vulnerability allow 0.2%