Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
azuatedhiics7.informatica.comIn scope2026-11-14
b2bdx.informatica.comIn scope2026-11-14
b2btest.informatica.comIn scope2026-11-14
battlecards.informatica.comIn scope2026-11-14
www.battlecards.informatica.comIn scope2026-11-14
beinformed.informatica.comIn scope2026-11-14
beinformed-test.informatica.comtestIn scope2026-11-14
benefits.informatica.comIn scope2026-11-14
bitb.informatica.comIn scope2026-11-14
www.bitb.informatica.comIn scope2026-11-14
bitbelastic.informatica.comIn scope2026-11-14
bitbtest.informatica.comIn scope2026-11-14
bjgw.informatica.comIn scope2026-11-14
bl.informatica.comIn scope2026-11-14
black.informatica.comIn scope2026-11-14
blamgw.informatica.comIn scope2026-11-14
blapgw.informatica.comIn scope2026-11-14
bleugw.informatica.comIn scope2026-11-14
blexpc01.informatica.comIn scope2026-11-14
blexpc02.informatica.comIn scope2026-11-14
blexpccluster.informatica.comIn scope2026-11-14
blexpe01.informatica.comIn scope2026-11-14
blexpe02.informatica.comIn scope2026-11-14
blexpecluster.informatica.comIn scope2026-11-14
blgw.informatica.comIn scope2026-11-14
bllxcm04.informatica.comIn scope2026-11-14
bllxunity02.informatica.comIn scope2026-11-14
blog.informatica.comIn scope2026-11-14
blogs.informatica.comIn scope2026-11-14
blogsdev.informatica.comIn scope2026-11-14
bltest.informatica.comIn scope2026-11-14
bltestgw.informatica.comIn scope2026-11-14
br.informatica.comIn scope2026-11-14
brand.informatica.comIn scope2026-11-14
c2c.informatica.comIn scope2026-11-14
careers.informatica.comIn scope2026-11-14
www.careers.informatica.comIn scope2026-11-14
cegw.informatica.comIn scope2026-11-14
www.cegw.informatica.comIn scope2026-11-14
certification.informatica.comIn scope2026-11-14
chat.informatica.comIn scope2026-11-14
chgw.informatica.comIn scope2026-11-14
cloud.informatica.comIn scope2026-11-14
www.cloud.informatica.comIn scope2026-11-14
cloudacademy.informatica.comIn scope2026-11-14
coe.informatica.comIn scope2026-11-14
collabdev.informatica.comIn scope2026-11-14
asvcsct01.collabdev.informatica.comIn scope2026-11-14
psdevexpccluster.collabdev.informatica.comIn scope2026-11-14
psdevexpecluster.collabdev.informatica.comIn scope2026-11-14
psvcsct01.collabdev.informatica.comIn scope2026-11-14
psvcsct02.collabdev.informatica.comIn scope2026-11-14
psvcset01.collabdev.informatica.comIn scope2026-11-14
www.psvcset01.collabdev.informatica.comIn scope2026-11-14
psvcset02.collabdev.informatica.comIn scope2026-11-14
qydevexpccluster.collabdev.informatica.comIn scope2026-11-14
qyvcsct02.collabdev.informatica.comIn scope2026-11-14
communities.informatica.comIn scope2026-11-14
communities-dev.informatica.comdevIn scope2026-11-14
communities-test.informatica.comtestIn scope2026-11-14
www.communities-test.informatica.comtestIn scope2026-11-14
communities2.informatica.comIn scope2026-11-14
community.informatica.comIn scope2026-11-14
community-test.informatica.comtestIn scope2026-11-14
www.community-test.informatica.comtestIn scope2026-11-14
communitytest.informatica.comIn scope2026-11-14
confdmz.informatica.comIn scope2026-11-14
connect.informatica.comIn scope2026-11-14
apps.connect.informatica.comIn scope2026-11-14
uat.connect.informatica.comtestIn scope2026-11-14
apps.uat.connect.informatica.comtestIn scope2026-11-14
www.connect.informatica.comIn scope2026-11-14
content.informatica.comIn scope2026-11-14
www.content.informatica.comIn scope2026-11-14
cosmic.informatica.comIn scope2026-11-14
creative.informatica.comIn scope2026-11-14
crl.informatica.comIn scope2026-11-14
csm.informatica.comIn scope2026-11-14
customersuccess.informatica.comIn scope2026-11-14
cygw.informatica.comIn scope2026-11-14
da.informatica.comIn scope2026-11-14
datamasters.informatica.comIn scope2026-11-14
dataviz.informatica.comIn scope2026-11-14
dataviz-test.informatica.comtestIn scope2026-11-14
www.dataviz.informatica.comIn scope2026-11-14
db-sbc1.informatica.comdataIn scope2026-11-14
www.db-sbc1.informatica.comdataIn scope2026-11-14
dbexpc01.informatica.comIn scope2026-11-14
dbexpc02.informatica.comIn scope2026-11-14
dbexpccluster.informatica.comIn scope2026-11-14
dbexpe01.informatica.comIn scope2026-11-14
dbexpe02.informatica.comIn scope2026-11-14
dbexpecluster.informatica.comIn scope2026-11-14
dbgw.informatica.comIn scope2026-11-14
demo-jive.informatica.comtestIn scope2026-11-14
democentral.informatica.comIn scope2026-11-14
prod-node01.democentral.informatica.comIn scope2026-11-14
prod-node02.democentral.informatica.comIn scope2026-11-14
prod-node03.democentral.informatica.comIn scope2026-11-14
qa-node01.democentral.informatica.comtestIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in