Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
qa-node02.democentral.informatica.comtestIn scope2026-11-14
qa-node03.democentral.informatica.comtestIn scope2026-11-14
democentralqa.informatica.comIn scope2026-11-14
demos.informatica.comIn scope2026-11-14
www.demos.informatica.comIn scope2026-11-14
devaxon.informatica.comIn scope2026-11-14
devedc.informatica.comIn scope2026-11-14
developer.informatica.comIn scope2026-11-14
developer-test.informatica.comtestIn scope2026-11-14
devitk8sregistry.informatica.comIn scope2026-11-14
devnet.informatica.comIn scope2026-11-14
diagonalley.informatica.comIn scope2026-11-14
diaku.informatica.comIn scope2026-11-14
diamond.informatica.comIn scope2026-11-14
directaccess-nls.informatica.comIn scope2026-11-14
discoveryiq.informatica.comIn scope2026-11-14
discoveryiq-preview.informatica.comstagingIn scope2026-11-14
discoveryiq-qa.informatica.comtestIn scope2026-11-14
docportalbeta.informatica.comIn scope2026-11-14
docs.informatica.comIn scope2026-11-14
docs-test.informatica.comtestIn scope2026-11-14
download.informatica.comIn scope2026-11-14
download-test.informatica.comtestIn scope2026-11-14
dpsupport.informatica.comIn scope2026-11-14
dpsupport-test.informatica.comtestIn scope2026-11-14
www.dpsupport-test.informatica.comtestIn scope2026-11-14
www.dpsupport.informatica.comIn scope2026-11-14
dpsupporttest.informatica.comIn scope2026-11-14
dqanalysis.informatica.comIn scope2026-11-14
dqpoc.informatica.comIn scope2026-11-14
dqqaedge001.informatica.comIn scope2026-11-14
droplets.informatica.comIn scope2026-11-14
playground.droplets.informatica.comIn scope2026-11-14
showcase.droplets.informatica.comIn scope2026-11-14
drsfdc.informatica.comIn scope2026-11-14
drsfdc-ctetest.informatica.comIn scope2026-11-14
www.drsfdc-ctetest.informatica.comIn scope2026-11-14
www.drsfdc.informatica.comIn scope2026-11-14
eagle.informatica.comIn scope2026-11-14
mx.ebc.informatica.commailIn scope2026-11-14
edc.informatica.comIn scope2026-11-14
www.edc.informatica.comIn scope2026-11-14
click.email.informatica.comIn scope2026-11-14
cloud.email.informatica.comIn scope2026-11-14
image.email.informatica.comIn scope2026-11-14
mta.email.informatica.comIn scope2026-11-14
view.email.informatica.comIn scope2026-11-14
emmeti.informatica.comIn scope2026-11-14
enablement.informatica.comIn scope2026-11-14
enablement-test.informatica.comtestIn scope2026-11-14
www.enablement-test.informatica.comtestIn scope2026-11-14
enablementtest.informatica.comIn scope2026-11-14
engage.informatica.comIn scope2026-11-14
engage-test.informatica.comtestIn scope2026-11-14
engageitops.informatica.comIn scope2026-11-14
enterpriseregistration.informatica.comIn scope2026-11-14
epmtest.informatica.comIn scope2026-11-14
erpcheckipp.informatica.comIn scope2026-11-14
www.erpcheckipp.informatica.comIn scope2026-11-14
estimator.informatica.comIn scope2026-11-14
estimator-dev.informatica.comdevIn scope2026-11-14
www.estimator-dev.informatica.comdevIn scope2026-11-14
estimator-stage.informatica.comstagingIn scope2026-11-14
www.estimator-stage.informatica.comstagingIn scope2026-11-14
www.estimator.informatica.comIn scope2026-11-14
esupport-sit.informatica.comtestIn scope2026-11-14
esupport-test.informatica.comtestIn scope2026-11-14
www.esupport-test.informatica.comtestIn scope2026-11-14
eu.informatica.comIn scope2026-11-14
eu-int-gw.informatica.comIn scope2026-11-14
eu-sbc1.informatica.comIn scope2026-11-14
www.eu-sbc1.informatica.comIn scope2026-11-14
euexpc01.informatica.comIn scope2026-11-14
euexpc02.informatica.comIn scope2026-11-14
euexpccluster.informatica.comIn scope2026-11-14
euexpe01.informatica.comIn scope2026-11-14
euexpe02.informatica.comIn scope2026-11-14
euexpecluster.informatica.comIn scope2026-11-14
euftp1.informatica.comIn scope2026-11-14
eugw.informatica.comIn scope2026-11-14
eulxcm01.informatica.comIn scope2026-11-14
eulxcm01-ms.informatica.comIn scope2026-11-14
eulxcm02.informatica.comIn scope2026-11-14
eulxcm02-ms.informatica.comIn scope2026-11-14
eulxcm03.informatica.comIn scope2026-11-14
eulximp01.informatica.comIn scope2026-11-14
eulximp02.informatica.comIn scope2026-11-14
eulxum01.informatica.comIn scope2026-11-14
eulxum01-ms.informatica.comIn scope2026-11-14
eulxum02.informatica.comIn scope2026-11-14
eumailweb.informatica.comIn scope2026-11-14
euts.informatica.comIn scope2026-11-14
euv16oktap01.informatica.comIn scope2026-11-14
euv16oktat01.informatica.comIn scope2026-11-14
www.euv16oktat01.informatica.comIn scope2026-11-14
euvdcgw.informatica.comIn scope2026-11-14
euvi12oktap01.informatica.comIn scope2026-11-14
euvi12oktat01.informatica.comIn scope2026-11-14
euvpn.informatica.comIn scope2026-11-14
experience.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in