Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
207-207-12-2.informatica.comIn scope2026-11-14
207-207-12-3.informatica.comIn scope2026-11-14
accounts.informatica.comIn scope2026-11-14
accounts-alpha.informatica.comstagingIn scope2026-11-14
accounts-dev.informatica.comdevIn scope2026-11-14
accounts-dev3.informatica.comdevIn scope2026-11-14
accounts-dev65.informatica.comdevIn scope2026-11-14
accounts-qa.informatica.comtestIn scope2026-11-14
accounts-sandbox.informatica.comtestIn scope2026-11-14
accounts-sit.informatica.comtestIn scope2026-11-14
accounts-stage.informatica.comstagingIn scope2026-11-14
adfs.informatica.comauthIn scope2026-11-14
www.adfs.informatica.comauthIn scope2026-11-14
aem-qa.informatica.comtestIn scope2026-11-14
aem-test.informatica.comtestIn scope2026-11-14
aglets.informatica.comIn scope2026-11-14
aglets-test.informatica.comtestIn scope2026-11-14
alpha.informatica.comstagingIn scope2026-11-14
alpha63.informatica.comstagingIn scope2026-11-14
altdataviz.informatica.comIn scope2026-11-14
amvpn.informatica.comIn scope2026-11-14
www.amvpn.informatica.comIn scope2026-11-14
apacftp.informatica.comIn scope2026-11-14
apitest.informatica.comIn scope2026-11-14
apitest1.informatica.comIn scope2026-11-14
apitest2.informatica.comIn scope2026-11-14
appintegration.informatica.comIn scope2026-11-14
www.appintegration.informatica.comIn scope2026-11-14
appseur.informatica.comIn scope2026-11-14
apvpn.informatica.comIn scope2026-11-14
as-int-gw.informatica.comIn scope2026-11-14
as-sbc1.informatica.comIn scope2026-11-14
www.as-sbc1.informatica.comIn scope2026-11-14
as-sbc2.informatica.comIn scope2026-11-14
www.as-sbc2.informatica.comIn scope2026-11-14
asgw.informatica.comIn scope2026-11-14
aslxcm04.informatica.comIn scope2026-11-14
aslxum02.informatica.comIn scope2026-11-14
asnagiosxip01.informatica.comIn scope2026-11-14
assess.informatica.comIn scope2026-11-14
asv16oktap01.informatica.comIn scope2026-11-14
asv16oktat01.informatica.comIn scope2026-11-14
asv22oktap01.informatica.comIn scope2026-11-14
www.asv22oktap01.informatica.comIn scope2026-11-14
asvpsucatalogintdev.informatica.comIn scope2026-11-14
asvrhmorphapp1.informatica.comIn scope2026-11-14
asvrhmorphapp2.informatica.comIn scope2026-11-14
asvrhmorphapp3.informatica.comIn scope2026-11-14
atlassian-geo-vip.informatica.comIn scope2026-11-14
dhcp-26-84-12-12.attalain-download-test.informatica.comtestIn scope2026-11-14
attend.informatica.comIn scope2026-11-14
www.attend.informatica.comIn scope2026-11-14
au-sbc1.informatica.comIn scope2026-11-14
www.au-sbc1.informatica.comIn scope2026-11-14
au-sbc2.informatica.comIn scope2026-11-14
www.au-sbc2.informatica.comIn scope2026-11-14
augw.informatica.comIn scope2026-11-14
aulab-int-gw.informatica.comIn scope2026-11-14
aulabgw.informatica.comIn scope2026-11-14
aulabvpn.informatica.comIn scope2026-11-14
austinredirects.informatica.comIn scope2026-11-14
auth.informatica.comauthIn scope2026-11-14
auth1.informatica.comauthIn scope2026-11-14
auth2.informatica.comauthIn scope2026-11-14
auth3.informatica.comauthIn scope2026-11-14
auth4.informatica.comauthIn scope2026-11-14
auth5.informatica.comauthIn scope2026-11-14
auth6.informatica.comauthIn scope2026-11-14
auth7.informatica.comauthIn scope2026-11-14
auth8.informatica.comauthIn scope2026-11-14
authvip.informatica.comIn scope2026-11-14
autodiscover.informatica.commailIn scope2026-11-14
auvrhconfdr01.informatica.comIn scope2026-11-14
auvrhjiradr01.informatica.comIn scope2026-11-14
axon.informatica.comIn scope2026-11-14
www.axon.informatica.comIn scope2026-11-14
azdataviz.informatica.comIn scope2026-11-14
azdevcdhbde1.informatica.comIn scope2026-11-14
www.azdevcdhbde1.informatica.comIn scope2026-11-14
azdevcdhbde2.informatica.comIn scope2026-11-14
www.azdevcdhbde2.informatica.comIn scope2026-11-14
azdevcdhedc1.informatica.comIn scope2026-11-14
azdevcdhedchw1.informatica.comIn scope2026-11-14
azdevcdhedchw2.informatica.comIn scope2026-11-14
azdevcdhedchw3.informatica.comIn scope2026-11-14
azdevcdhhslb01.informatica.comIn scope2026-11-14
azdevcdhm1.informatica.comIn scope2026-11-14
www.azdevcdhm1.informatica.comIn scope2026-11-14
azdevcdhm2.informatica.comIn scope2026-11-14
www.azdevcdhm2.informatica.comIn scope2026-11-14
azdevcdhslv1.informatica.comIn scope2026-11-14
www.azdevcdhslv1.informatica.comIn scope2026-11-14
azdevcdhslv2.informatica.comIn scope2026-11-14
www.azdevcdhslv2.informatica.comIn scope2026-11-14
azdevcdhslv3.informatica.comIn scope2026-11-14
www.azdevcdhslv3.informatica.comIn scope2026-11-14
azdevcdhslv4.informatica.comIn scope2026-11-14
www.azdevcdhslv4.informatica.comIn scope2026-11-14
azdevcdhslv5.informatica.comIn scope2026-11-14
www.azdevcdhslv5.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in