← Back

Knowbe4

knowbe4

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Security Awareness Training
security_awareness_training
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36845
1Knowbe4
1Security Awareness Training
Jun 17, 2026
Apr 20, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.locatio...Show more
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect function that does not validate the destination URL before redirecting. The response has a SCRIPT element that sets window.location.href to an arbitrary https URL.Show less
CVE-2020-36844
1Knowbe4
1Security Awareness Training
Jun 17, 2026
Apr 20, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to a JavaScript URL.