Skip to content
Connect AISign inSign up free

Bug bounty program

IN

Informatica

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.comAnalysed#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell PossibleAnalysed#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXEAnalysed#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection OracleAnalysed#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]Analysed#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.comAnalysed#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Root:informatica.com
Scope
Name suggests:Staging
First seen
Text fileClear filters25 names
Subdomains of Informatica
NameScopeFirst seen
alpha.informatica.comstagingIn scope2026-11-14
alpha63.informatica.comstagingIn scope2026-11-14
iw-alpha.informatica.comstagingIn scope2026-11-14
iw-stage.informatica.comstagingIn scope2026-11-14
www-stage.informatica.comstagingIn scope2026-11-14
pulse-stage.informatica.comstagingIn scope2026-11-14
rev-preview.informatica.comstagingIn scope2026-11-14
trust-stage.informatica.comstagingIn scope2026-11-14
success-stage.informatica.comstagingIn scope2026-11-14
accounts-alpha.informatica.comstagingIn scope2026-11-14
accounts-stage.informatica.comstagingIn scope2026-11-14
partners-alpha.informatica.comstagingIn scope2026-11-14
partners-stage.informatica.comstagingIn scope2026-11-14
estimator-stage.informatica.comstagingIn scope2026-11-14
rev-preview-app.informatica.comstagingIn scope2026-11-14
experience-alpha.informatica.comstagingIn scope2026-11-14
experience-stage.informatica.comstagingIn scope2026-11-14
marketplace-alpha.informatica.comstagingIn scope2026-11-14
marketplace-stage.informatica.comstagingIn scope2026-11-14
discoveryiq-preview.informatica.comstagingIn scope2026-11-14
www.estimator-stage.informatica.comstagingIn scope2026-11-14
oke.stage.trainingportal.informatica.comstagingIn scope2026-11-14
guac.stage.trainingportal.informatica.comstagingIn scope2026-11-14
infapassport-preview-saml-slo-signing.informatica.comauth, stagingIn scope2026-11-14
www.infapassport-preview-saml-slo-signing.informatica.comauth, stagingIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated