Informatica · disclosed reports
Cross-site Scripting
28 disclosed reports · $0 paid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. Reports open on HackerOne.
Open Informatica on HackerOne- reports
- 28
- paid a bounty
- 0
Every one of the 28 is a mark on the map. Named now: 1 to 26, most upvoted first.
- Cross-site Scripting (XSS) - DOM - iqcard.informatica.com
- [kb.informatica.com] Dom Based xss
- Reflected XSS
- Store XSS on Informatica University via transcript (informatica.csod.com)
- Improper Sanitization leads to XSS Fire on admin panel
- RXSS in http://procurement-businesscatalog.informatica.com
- Cross site scripting
- [informatica.com]- Cross Site scripting
- [kb.informatica.com] DOM based XSS in the bindBreadCrumb function
- [alpha.informatica.com] Expensive DOMXSS
- [uk.informatica.com] XSS on uk.informatica..com
- [careers.informatica.com] Cross Site Script Vulnerability on informatica
- Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]
- [marketplace.informatica.com] Persistent XSS through document title
- [parc.informatica.com] Reflected Cross Site Scripting and Open Redirect
- [network.informatica.com] The login form XSS via the referer value
- [kb.informatica.com] Stored XSS
- [marketplace.informatica.com] - Stored XSS
- [marketplace.informatica.com]-Reflected XSS
- [doc.rt.informaticacloud.com] Reflected XSS via Stack Strace
- [now.informatica.com] Reflective Xss
- [marketplace.informatica.com]- Stored XSS on Image title and Edit Property
- [marketplace.informatica.com] Search XSS
- [careers.informatica.com] XSS on "isJTN"
- [now.informatica.com] Reflective XSS
- [marketplace.informatica.com] Profile stored XSS
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.