Skip to content
Connect AISign inSign up free

Bug bounty program

IB

IBM

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
3
Disclosed reports
48
Subdomains
104,394
Vendor on CyberSIXT
IBM (9,661 CVEs, 9 exploited)

Most upvoted reports48

All reports
Most upvoted reports of IBM
ReportWeaknessDisclosedBountyVotes
SQL Injection vulnerability found on ibm.com endpointAnalysed#3578842SQL Injection2026-03-12–137
Potential Subdomain Takeover on IBM.com domain.Analysed#3592387Access Control2026-03-24–82
Middleware Authentication Bypass on IBM PortalAnalysed#3088290Command and Code Injection2025-05-02–80
SSRF via host header let access localhost via https://go.dialexa.comAnalysed#2696271No weakness recorded2024-10-03–75
S3 Bucket Takeover on apptio endpointAnalysed#2498255Access Control2024-06-21–72
SSRF and secret key disclosure found on Turbonomic endpointAnalysed#2697592Server-Side Request Forgery2024-09-19–71
Unauthenticated Remote Access to Testing EndpointAnalysed#2192984Access Control2023-12-04–67
[RCE] Remote Code Execution via React Server Components Vulnerability CVE-2025-55182Analysed#3458235Command and Code Injection2025-12-18–67
RXSS in hidden parameterAnalysed#2090964Cross-site Scripting2024-04-23–65
XSS Refelected on jazz.netAnalysed#2338285Cross-site Scripting2024-02-29–64

Subdomains104,394

Root
Scope
Name suggests
First seen
Text file104,394 names
Subdomains of IBM
NameScopeFirst seen
blueroom.automationcloud.ibm.comNo domain scope published2026-11-14
ibm-process-mining-trial.automationcloud.ibm.comNo domain scope published2026-11-14
odm-dev-dbaoc-demo-4q.automationcloud.ibm.comdev, testNo domain scope published2026-11-14
o1.ptr458.automationcloud.ibm.comNo domain scope published2026-11-14
www.automationcloud.ibm.comNo domain scope published2026-11-14
frontend-te.automationplatform.ibm.comNo domain scope published2026-11-14
keycloak.automationplatform.ibm.comauthNo domain scope published2026-11-14
roksdev.automationplatform.ibm.comNo domain scope published2026-11-14
aachat-dev.roksdev.automationplatform.ibm.comdevNo domain scope published2026-11-14
aiops.roksdev.automationplatform.ibm.comNo domain scope published2026-11-14
dwcommon-mcpserver.roksdev.automationplatform.ibm.comNo domain scope published2026-11-14
roksnauat.automationplatform.ibm.comNo domain scope published2026-11-14
roksperf.automationplatform.ibm.comNo domain scope published2026-11-14
roksprod.automationplatform.ibm.comNo domain scope published2026-11-14
roksprod-test.automationplatform.ibm.comtestNo domain scope published2026-11-14
digitalworkers.roksprod.automationplatform.ibm.comNo domain scope published2026-11-14
dwcommon-mcpserver.roksprod.automationplatform.ibm.comNo domain scope published2026-11-14
roksuat.automationplatform.ibm.comNo domain scope published2026-11-14
backend.te.automationplatform.ibm.comNo domain scope published2026-11-14
www.av.ibm.comNo domain scope published2026-11-14
awf.ibm.comNo domain scope published2026-11-14
www.az.ibm.comNo domain scope published2026-11-14
azogsa.ibm.comNo domain scope published2026-11-14
b2b.ibm.comNo domain scope published2026-11-14
apps.b2b.ibm.comNo domain scope published2026-11-14
avservice.b2b.ibm.comNo domain scope published2026-11-14
bolapps.b2b.ibm.comNo domain scope published2026-11-14
bti.b2b.ibm.comNo domain scope published2026-11-14
bti-anomaly-cte.b2b.ibm.comNo domain scope published2026-11-14
bti-anomaly-prod.b2b.ibm.comNo domain scope published2026-11-14
api.bti.b2b.ibm.comapiNo domain scope published2026-11-14
preprod-api.bti.b2b.ibm.comapi, stagingNo domain scope published2026-11-14
www.bti.b2b.ibm.comNo domain scope published2026-11-14
btie.b2b.ibm.comNo domain scope published2026-11-14
www.btie.b2b.ibm.comNo domain scope published2026-11-14
api.cc.b2b.ibm.comapiNo domain scope published2026-11-14
api-np.cc.b2b.ibm.comapiNo domain scope published2026-11-14
api-qa.cc.b2b.ibm.comapi, testNo domain scope published2026-11-14
bff.cc.b2b.ibm.comNo domain scope published2026-11-14
bff-np.cc.b2b.ibm.comNo domain scope published2026-11-14
bff-qa.cc.b2b.ibm.comtestNo domain scope published2026-11-14
ui.cc.b2b.ibm.comNo domain scope published2026-11-14
ui-nc.cc.b2b.ibm.comNo domain scope published2026-11-14
ui-nc-np.cc.b2b.ibm.comNo domain scope published2026-11-14
ui-nc-qa.cc.b2b.ibm.comtestNo domain scope published2026-11-14
ui-np.cc.b2b.ibm.comNo domain scope published2026-11-14
ui-qa.cc.b2b.ibm.comtestNo domain scope published2026-11-14
api.ccoc.b2b.ibm.comapiNo domain scope published2026-11-14
cfgprev.b2b.ibm.comNo domain scope published2026-11-14
cfxapiprev.b2b.ibm.comNo domain scope published2026-11-14
cfxdemo.b2b.ibm.comNo domain scope published2026-11-14
cfxdemoapi.b2b.ibm.comNo domain scope published2026-11-14
cfxprev.b2b.ibm.comNo domain scope published2026-11-14
cicd-agent.b2b.ibm.comciNo domain scope published2026-11-14
config-center.b2b.ibm.comNo domain scope published2026-11-14
config-center-dr.b2b.ibm.comNo domain scope published2026-11-14
config-center-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
config-center-eu-dr.b2b.ibm.comNo domain scope published2026-11-14
config-center-eu-prod.b2b.ibm.comNo domain scope published2026-11-14
config-center-na-cte.b2b.ibm.comNo domain scope published2026-11-14
config-center-na-dr.b2b.ibm.comNo domain scope published2026-11-14
config-center-na-prod.b2b.ibm.comNo domain scope published2026-11-14
config-center-qa.b2b.ibm.comtestNo domain scope published2026-11-14
config-center-qa1.b2b.ibm.comNo domain scope published2026-11-14
confighub.b2b.ibm.comNo domain scope published2026-11-14
confighub-api.b2b.ibm.comapiNo domain scope published2026-11-14
confighub-api-eu.b2b.ibm.comapiNo domain scope published2026-11-14
confighub-api-np.b2b.ibm.comapiNo domain scope published2026-11-14
confighub-eu.b2b.ibm.comNo domain scope published2026-11-14
confighub-np.b2b.ibm.comNo domain scope published2026-11-14
confighub-rule.b2b.ibm.comNo domain scope published2026-11-14
confighub-rule-eu.b2b.ibm.comNo domain scope published2026-11-14
confighub-rule-np.b2b.ibm.comNo domain scope published2026-11-14
bti.cte.b2b.ibm.comNo domain scope published2026-11-14
bti-api.cte.b2b.ibm.comapiNo domain scope published2026-11-14
btie.cte.b2b.ibm.comNo domain scope published2026-11-14
dal10gslb.b2b.ibm.comNo domain scope published2026-11-14
dal12gslb.b2b.ibm.comNo domain scope published2026-11-14
dal13gslb.b2b.ibm.comNo domain scope published2026-11-14
dns2.b2b.ibm.comNo domain scope published2026-11-14
doctrack.b2b.ibm.comNo domain scope published2026-11-14
doctrack-np.b2b.ibm.comNo domain scope published2026-11-14
drsciapps.b2b.ibm.comNo domain scope published2026-11-14
drscipush.b2b.ibm.comNo domain scope published2026-11-14
filetransfer.b2b.ibm.comNo domain scope published2026-11-14
api.if.b2b.ibm.comapiNo domain scope published2026-11-14
api-cte.if.b2b.ibm.comapiNo domain scope published2026-11-14
api-eu.if.b2b.ibm.comapiNo domain scope published2026-11-14
api-eu-cte.if.b2b.ibm.comapiNo domain scope published2026-11-14
api-np.if.b2b.ibm.comapiNo domain scope published2026-11-14
api-qa.if.b2b.ibm.comapi, testNo domain scope published2026-11-14
api-test.if.b2b.ibm.comapi, testNo domain scope published2026-11-14
inflight.b2b.ibm.comNo domain scope published2026-11-14
inflight-eu.b2b.ibm.comNo domain scope published2026-11-14
inflight-eu-cte.b2b.ibm.comNo domain scope published2026-11-14
inflight-na-cte.b2b.ibm.comNo domain scope published2026-11-14
inflight-np.b2b.ibm.comNo domain scope published2026-11-14
preprod-api-bti.b2b.ibm.comapi, stagingNo domain scope published2026-11-14
protocol.b2b.ibm.comNo domain scope published2026-11-14
protocol-cte.b2b.ibm.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 3 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated