Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.comAnalysed#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell PossibleAnalysed#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXEAnalysed#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection OracleAnalysed#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]Analysed#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.comAnalysed#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXEAnalysed#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker AccessAnalysed#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
www.ssotest.informatica.comIn scope2026-11-14
ssotest2.informatica.comIn scope2026-11-14
status.informatica.commonitoringIn scope2026-11-14
status-sit.informatica.commonitoring, testIn scope2026-11-14
www.status.informatica.commonitoringIn scope2026-11-14
stgw.informatica.comIn scope2026-11-14
store.informatica.comIn scope2026-11-14
stork.informatica.comIn scope2026-11-14
su-sbc1.informatica.comIn scope2026-11-14
subscription.informatica.comIn scope2026-11-14
success.informatica.comIn scope2026-11-14
success-dev.informatica.comdevIn scope2026-11-14
success-dev3.informatica.comdevIn scope2026-11-14
success-dev65.informatica.comdevIn scope2026-11-14
success-sit.informatica.comtestIn scope2026-11-14
success-stage.informatica.comstagingIn scope2026-11-14
successacademy.informatica.comIn scope2026-11-14
successbot.informatica.comIn scope2026-11-14
www.successbot.informatica.comIn scope2026-11-14
sugw.informatica.comIn scope2026-11-14
sulxcm02.informatica.comIn scope2026-11-14
sulxum02.informatica.comIn scope2026-11-14
suparking.informatica.comIn scope2026-11-14
www.suparking.informatica.comIn scope2026-11-14
support.informatica.comIn scope2026-11-14
www.support.informatica.comIn scope2026-11-14
suvi12oktap01.informatica.comIn scope2026-11-14
suvi12oktat01.informatica.comIn scope2026-11-14
suvlxmail01.informatica.comIn scope2026-11-14
swarm.informatica.comIn scope2026-11-14
swiftgit.informatica.comIn scope2026-11-14
swiftui.informatica.comIn scope2026-11-14
www.swiftui.informatica.comIn scope2026-11-14
sy-sbc1.informatica.comIn scope2026-11-14
www.sy-sbc1.informatica.comIn scope2026-11-14
sygw.informatica.comIn scope2026-11-14
system360.informatica.comIn scope2026-11-14
www.system360.informatica.comIn scope2026-11-14
syvpn.informatica.comIn scope2026-11-14
ta-sbc1.informatica.comIn scope2026-11-14
www.ta-sbc1.informatica.comIn scope2026-11-14
tagw.informatica.comIn scope2026-11-14
taxap.informatica.comIn scope2026-11-14
technet.informatica.comIn scope2026-11-14
testcloud.informatica.comIn scope2026-11-14
testdataviz.informatica.comIn scope2026-11-14
www.testdataviz.informatica.comIn scope2026-11-14
testradar.informatica.comIn scope2026-11-14
testradarvip.informatica.comIn scope2026-11-14
thc.informatica.comIn scope2026-11-14
www.thc.informatica.comIn scope2026-11-14
tk-sbc1.informatica.comIn scope2026-11-14
www.tk-sbc1.informatica.comIn scope2026-11-14
tkgw.informatica.comIn scope2026-11-14
tnebot.informatica.comIn scope2026-11-14
tnebottest.informatica.comIn scope2026-11-14
tr1.informatica.comIn scope2026-11-14
tr2.informatica.comIn scope2026-11-14
tr3.informatica.comIn scope2026-11-14
tr4.informatica.comIn scope2026-11-14
tradeshows.informatica.comIn scope2026-11-14
training.informatica.comIn scope2026-11-14
trainingandevents.informatica.comIn scope2026-11-14
trainingportal.informatica.comIn scope2026-11-14
guac.phx.trainingportal.informatica.comIn scope2026-11-14
oke.phx.trainingportal.informatica.comIn scope2026-11-14
guac.stage.trainingportal.informatica.comstagingIn scope2026-11-14
oke.stage.trainingportal.informatica.comstagingIn scope2026-11-14
www.trainingportal.informatica.comIn scope2026-11-14
trust.informatica.comIn scope2026-11-14
trust-dev3.informatica.comdevIn scope2026-11-14
trust-sit.informatica.comtestIn scope2026-11-14
trust-stage.informatica.comstagingIn scope2026-11-14
ts-sbc1.informatica.comIn scope2026-11-14
www.ts-sbc1.informatica.comIn scope2026-11-14
tsftp.informatica.comIn scope2026-11-14
tsftp-test.informatica.comtestIn scope2026-11-14
www.tsftp.informatica.comIn scope2026-11-14
tsftpint.informatica.comIn scope2026-11-14
tsftptest.informatica.comIn scope2026-11-14
tsgw.informatica.comIn scope2026-11-14
ukmail.informatica.comIn scope2026-11-14
ukremote.informatica.comIn scope2026-11-14
ukremote-jvm.informatica.comIn scope2026-11-14
ukremote-test.informatica.comtestIn scope2026-11-14
www.ukremote.informatica.comIn scope2026-11-14
ukvpn.informatica.comIn scope2026-11-14
www.ukvpn.informatica.comIn scope2026-11-14
um.informatica.comIn scope2026-11-14
usgate.informatica.comIn scope2026-11-14
usim.informatica.comIn scope2026-11-14
usipass.informatica.comIn scope2026-11-14
usmail.informatica.comIn scope2026-11-14
usmailhub-vip.informatica.comIn scope2026-11-14
usremote.informatica.comIn scope2026-11-14
usremote-jvm.informatica.comIn scope2026-11-14
usremote-test.informatica.comtestIn scope2026-11-14
www.usremote.informatica.comIn scope2026-11-14
usvpn.informatica.comIn scope2026-11-14
www.usvpn.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.