Knowbe4 Security Awareness Training
2 CVEs affecting Knowbe4 Security Awareness Training. Latest disclosed: 2025-04-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-36844 | Medium | 6.1 | 2025-04-20 | The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to… |
CVE-2020-36845 | Medium | 5.3 | 2025-04-20 | The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirectin… |