Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.comAnalysed#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
qyv16oktap02.informatica.comIn scope2026-11-14
qyv16oktat01.informatica.comIn scope2026-11-14
www.qyv16oktat01.informatica.comIn scope2026-11-14
qyv16oktat02.informatica.comIn scope2026-11-14
qyv16tabb01.informatica.comIn scope2026-11-14
qyv16tabp01.informatica.comIn scope2026-11-14
qyv16tabs01.informatica.comIn scope2026-11-14
qyv16tabs02.informatica.comIn scope2026-11-14
qyv16tools01.informatica.comIn scope2026-11-14
qyvcnt78ovoc01.informatica.comIn scope2026-11-14
www.qyvcnt78ovoc01.informatica.comIn scope2026-11-14
qyvi12oktap01.informatica.comIn scope2026-11-14
qyvi12oktap02.informatica.comIn scope2026-11-14
qyvi12oktat01.informatica.comIn scope2026-11-14
qyvi12oktat02.informatica.comIn scope2026-11-14
qyvi16sam03.informatica.comIn scope2026-11-14
www.qyvi16sam03.informatica.comIn scope2026-11-14
qyvlxidqprd01.informatica.comIn scope2026-11-14
qyvlxidqprd02.informatica.comIn scope2026-11-14
qyvrh73mdmprd01.informatica.comIn scope2026-11-14
qyvrh73mdmprd02.informatica.comIn scope2026-11-14
qyvrh7axndev01.informatica.comIn scope2026-11-14
qyvrh7axnprd01.informatica.comIn scope2026-11-14
www.qyvrh7axnprd01.informatica.comIn scope2026-11-14
qyvrh7dpmprd01.informatica.comIn scope2026-11-14
qyvrh7dpmprd02.informatica.comIn scope2026-11-14
www.qyvrh7dpmprd02.informatica.comIn scope2026-11-14
qyvrh7edcdev01.informatica.comIn scope2026-11-14
qyvrh7edcdev02.informatica.comIn scope2026-11-14
qyvrh7edcprd01.informatica.comIn scope2026-11-14
www.qyvrh7edcprd01.informatica.comIn scope2026-11-14
qyvrh7edcprd02.informatica.comIn scope2026-11-14
qyvrh7edcprd03.informatica.comIn scope2026-11-14
qyvrh7edcprd04.informatica.comIn scope2026-11-14
qyvrh7edcprd05.informatica.comIn scope2026-11-14
qyvrhmorphapp1.informatica.comIn scope2026-11-14
qyvrhmorphapp2.informatica.comIn scope2026-11-14
qyvrhmorphapp3.informatica.comIn scope2026-11-14
radar.informatica.comIn scope2026-11-14
radarvip.informatica.comIn scope2026-11-14
rc-sbc1.informatica.comIn scope2026-11-14
www.rc-sbc1.informatica.comIn scope2026-11-14
rc-sbc2.informatica.comIn scope2026-11-14
www.rc-sbc2.informatica.comIn scope2026-11-14
rcgw.informatica.comIn scope2026-11-14
red.informatica.comIn scope2026-11-14
redirects.informatica.comIn scope2026-11-14
www.redirects.informatica.comIn scope2026-11-14
redirerror-a.informatica.comIn scope2026-11-14
www.redirerror-a.informatica.comIn scope2026-11-14
reg.informatica.comIn scope2026-11-14
register.informatica.comIn scope2026-11-14
rev.informatica.comIn scope2026-11-14
rev-app.informatica.comIn scope2026-11-14
rev-maintenance.informatica.comIn scope2026-11-14
rev-preview.informatica.comstagingIn scope2026-11-14
rev-preview-app.informatica.comstagingIn scope2026-11-14
rev-qa.informatica.comtestIn scope2026-11-14
rev-qa-app.informatica.comtestIn scope2026-11-14
revfortableau.informatica.comIn scope2026-11-14
rndcloud.informatica.comIn scope2026-11-14
rns3.informatica.comIn scope2026-11-14
rsgw.informatica.comIn scope2026-11-14
rtdemo.informatica.comIn scope2026-11-14
ruby.informatica.comIn scope2026-11-14
saas.informatica.comIn scope2026-11-14
salesforce-aml.informatica.comIn scope2026-11-14
salesforce-aml-prod.informatica.comIn scope2026-11-14
sao.informatica.comIn scope2026-11-14
sccm-rcw.informatica.comIn scope2026-11-14
sccm-rwc.informatica.comIn scope2026-11-14
search.informatica.comIn scope2026-11-14
search-test.informatica.comtestIn scope2026-11-14
www.search-test.informatica.comtestIn scope2026-11-14
www.search.informatica.comIn scope2026-11-14
search2.informatica.comIn scope2026-11-14
secure.informatica.comIn scope2026-11-14
www.secure.informatica.comIn scope2026-11-14
secure2.informatica.comIn scope2026-11-14
secure3.informatica.comIn scope2026-11-14
www.secure3.informatica.comIn scope2026-11-14
integrate.services-dev.informatica.comdevIn scope2026-11-14
www.integrate.services-dev.informatica.comdevIn scope2026-11-14
sftp.informatica.comdataIn scope2026-11-14
sg-sbc1.informatica.comIn scope2026-11-14
sggw.informatica.comIn scope2026-11-14
shgw.informatica.comIn scope2026-11-14
slgw.informatica.comIn scope2026-11-14
sp-sbc1.informatica.comIn scope2026-11-14
www.sp-sbc1.informatica.comIn scope2026-11-14
spgw.informatica.comIn scope2026-11-14
sponsor.informatica.comIn scope2026-11-14
springbok.informatica.comIn scope2026-11-14
www.springbok.informatica.comIn scope2026-11-14
spurlmail.informatica.comIn scope2026-11-14
sso.informatica.comauthIn scope2026-11-14
www.sso.informatica.comauthIn scope2026-11-14
sso2.informatica.comauthIn scope2026-11-14
ssoprod2.informatica.comIn scope2026-11-14
ssotest.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.