Skip to content
Connect AISign inSign up free

Bug bounty program

IB

IBM

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
3
Disclosed reports
48
Subdomains
104,394
Vendor on CyberSIXT
IBM (9,661 CVEs, 9 exploited)

Most upvoted reports48

All reports
Most upvoted reports of IBM
ReportWeaknessDisclosedBountyVotes
SQL Injection vulnerability found on ibm.com endpointAnalysed#3578842SQL Injection2026-03-12–137
Potential Subdomain Takeover on IBM.com domain.Analysed#3592387Access Control2026-03-24–82
Middleware Authentication Bypass on IBM PortalAnalysed#3088290Command and Code Injection2025-05-02–80
SSRF via host header let access localhost via https://go.dialexa.comAnalysed#2696271No weakness recorded2024-10-03–75
S3 Bucket Takeover on apptio endpointAnalysed#2498255Access Control2024-06-21–72
SSRF and secret key disclosure found on Turbonomic endpointAnalysed#2697592Server-Side Request Forgery2024-09-19–71
Unauthenticated Remote Access to Testing EndpointAnalysed#2192984Access Control2023-12-04–67
[RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Analysed#3458235Command and Code Injection2025-12-18–67
RXSS in hidden parameterAnalysed#2090964Cross-site Scripting2024-04-23–65
XSS Refelected on jazz.netAnalysed#2338285Cross-site Scripting2024-02-29–64

Subdomains104,394

Root
Scope
Name suggests
First seen
Text file104,394 names
Subdomains of IBM
NameScopeFirst seen
protocol-eu.b2b.ibm.comNo domain scope published2026-11-14
protocol-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
protocol-mtls.b2b.ibm.comNo domain scope published2026-11-14
protocol-mtls-cte.b2b.ibm.comNo domain scope published2026-11-14
protocol-mtls-eu.b2b.ibm.comNo domain scope published2026-11-14
protocol-mtls-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
protocol-mtls-np.b2b.ibm.comNo domain scope published2026-11-14
protocol-np.b2b.ibm.comNo domain scope published2026-11-14
push.b2b.ibm.comNo domain scope published2026-11-14
qaapps.b2b.ibm.comNo domain scope published2026-11-14
qaportal.b2b.ibm.comNo domain scope published2026-11-14
qapush.b2b.ibm.comNo domain scope published2026-11-14
scbn-cnet-mcp-qa.b2b.ibm.comtestNo domain scope published2026-11-14
scbn-protocol.b2b.ibm.comNo domain scope published2026-11-14
scbn-protocol-cte.b2b.ibm.comNo domain scope published2026-11-14
scbn-protocol-eu.b2b.ibm.comNo domain scope published2026-11-14
scbn-protocol-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
scbn-protocol-np.b2b.ibm.comNo domain scope published2026-11-14
scbnapigateway.b2b.ibm.comNo domain scope published2026-11-14
scbnapigateway-cte.b2b.ibm.comNo domain scope published2026-11-14
scbnapigateway-eu.b2b.ibm.comNo domain scope published2026-11-14
scbnapigateway-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
scbnapigateway-qa.b2b.ibm.comtestNo domain scope published2026-11-14
scivdi.b2b.ibm.comNo domain scope published2026-11-14
scnsiftps.b2b.ibm.comNo domain scope published2026-11-14
www.scnsiftps.b2b.ibm.comNo domain scope published2026-11-14
sftp-filetransfer.b2b.ibm.comdataNo domain scope published2026-11-14
sjc03gslb.b2b.ibm.comNo domain scope published2026-11-14
stlapps.b2b.ibm.comNo domain scope published2026-11-14
confluence.tools.b2b.ibm.comtoolsNo domain scope published2026-11-14
confluence-dev.tools.b2b.ibm.comdev, toolsNo domain scope published2026-11-14
confluence-dr.tools.b2b.ibm.comtoolsNo domain scope published2026-11-14
jsd.tools.b2b.ibm.comNo domain scope published2026-11-14
jsd-dev.tools.b2b.ibm.comdevNo domain scope published2026-11-14
jsd-dr.tools.b2b.ibm.comNo domain scope published2026-11-14
jsw.tools.b2b.ibm.comNo domain scope published2026-11-14
jsw-dev.tools.b2b.ibm.comdevNo domain scope published2026-11-14
jsw-dr.tools.b2b.ibm.comNo domain scope published2026-11-14
status.tools.b2b.ibm.commonitoringNo domain scope published2026-11-14
api.van-qa.b2b.ibm.comapi, testNo domain scope published2026-11-14
as2.van-qa.b2b.ibm.comtestNo domain scope published2026-11-14
api.van.b2b.ibm.comapiNo domain scope published2026-11-14
jsw-testdr.wce.b2b.ibm.comNo domain scope published2026-11-14
webforms.b2b.ibm.comNo domain scope published2026-11-14
configurations.webforms.b2b.ibm.comNo domain scope published2026-11-14
configurationsapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
dashboards.webforms.b2b.ibm.comNo domain scope published2026-11-14
dashboardsapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
dbrules.webforms.b2b.ibm.comNo domain scope published2026-11-14
dbrulesapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
hvms.webforms.b2b.ibm.comNo domain scope published2026-11-14
imh.webforms.b2b.ibm.comNo domain scope published2026-11-14
imhapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
imhapinew.webforms.b2b.ibm.comNo domain scope published2026-11-14
imhnew.webforms.b2b.ibm.comNo domain scope published2026-11-14
menuapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
reports.webforms.b2b.ibm.comNo domain scope published2026-11-14
reportsapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
spicetrade.webforms.b2b.ibm.comNo domain scope published2026-11-14
spicetradeapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
spicy.webforms.b2b.ibm.comNo domain scope published2026-11-14
spicyapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
ssoapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
tenants.webforms.b2b.ibm.comNo domain scope published2026-11-14
tenantsapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
userm.webforms.b2b.ibm.comNo domain scope published2026-11-14
usermapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
usersapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
woms.webforms.b2b.ibm.comNo domain scope published2026-11-14
womsapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
womsplus.webforms.b2b.ibm.comNo domain scope published2026-11-14
womsplusapi.webforms.b2b.ibm.comNo domain scope published2026-11-14
webformscte.b2b.ibm.comNo domain scope published2026-11-14
catalog.webformscte.b2b.ibm.comNo domain scope published2026-11-14
catalogapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
configurations.webformscte.b2b.ibm.comNo domain scope published2026-11-14
configurationsapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
dashboards.webformscte.b2b.ibm.comNo domain scope published2026-11-14
dashboardsapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
dbrules.webformscte.b2b.ibm.comNo domain scope published2026-11-14
dbrulesapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
hvms.webformscte.b2b.ibm.comNo domain scope published2026-11-14
ikompli.webformscte.b2b.ibm.comNo domain scope published2026-11-14
ikompliapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
imh.webformscte.b2b.ibm.comNo domain scope published2026-11-14
imhapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
imhapinew.webformscte.b2b.ibm.comNo domain scope published2026-11-14
imhnew.webformscte.b2b.ibm.comNo domain scope published2026-11-14
menuapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
reports.webformscte.b2b.ibm.comNo domain scope published2026-11-14
reportsapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
servicesapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
spicetrade.webformscte.b2b.ibm.comNo domain scope published2026-11-14
spicetradeapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
spicy.webformscte.b2b.ibm.comNo domain scope published2026-11-14
ssoapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
tenants.webformscte.b2b.ibm.comNo domain scope published2026-11-14
tenantsapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14
translator.webformscte.b2b.ibm.comNo domain scope published2026-11-14
translatorapi.webformscte.b2b.ibm.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 3 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated