Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
experience-alpha.informatica.comstagingIn scope2026-11-14
experience-stage.informatica.comstagingIn scope2026-11-14
experience-test.informatica.comtestIn scope2026-11-14
www.experience-test.informatica.comtestIn scope2026-11-14
www.experience.informatica.comIn scope2026-11-14
explore.informatica.comIn scope2026-11-14
find.informatica.comIn scope2026-11-14
www.find.informatica.comIn scope2026-11-14
force.informatica.comIn scope2026-11-14
force-test.informatica.comtestIn scope2026-11-14
www.force-test.informatica.comtestIn scope2026-11-14
www.force.informatica.comIn scope2026-11-14
fr.informatica.comIn scope2026-11-14
ftp.informatica.comdataIn scope2026-11-14
ftp3.informatica.comdataIn scope2026-11-14
ftp4.informatica.comdataIn scope2026-11-14
www.ftp4.informatica.comdataIn scope2026-11-14
g.informatica.comIn scope2026-11-14
csm.g.informatica.comIn scope2026-11-14
demo-jive.g.informatica.comtestIn scope2026-11-14
demojive.g.informatica.comIn scope2026-11-14
drsfdc.g.informatica.comIn scope2026-11-14
drsfdc-ctetest.g.informatica.comIn scope2026-11-14
drsfdcctetest.g.informatica.comIn scope2026-11-14
ftp3.g.informatica.comdataIn scope2026-11-14
gcsfiles.g.informatica.comIn scope2026-11-14
jss.g.informatica.comIn scope2026-11-14
kb.g.informatica.comIn scope2026-11-14
kb-test.g.informatica.comtestIn scope2026-11-14
kbcrawl.g.informatica.comIn scope2026-11-14
kbtest.g.informatica.comIn scope2026-11-14
kbtestcrawl.g.informatica.comIn scope2026-11-14
marketplace.g.informatica.comIn scope2026-11-14
marketplace-test.g.informatica.comtestIn scope2026-11-14
marketplacetest.g.informatica.comIn scope2026-11-14
marketrketplace.g.informatica.comIn scope2026-11-14
network.g.informatica.comIn scope2026-11-14
network-test.g.informatica.comtestIn scope2026-11-14
networktest.g.informatica.comIn scope2026-11-14
oneclickdrsfdc.g.informatica.comIn scope2026-11-14
origin-download.g.informatica.comIn scope2026-11-14
origindownload.g.informatica.comIn scope2026-11-14
passport.g.informatica.comIn scope2026-11-14
passport-test.g.informatica.comtestIn scope2026-11-14
passporttest.g.informatica.comIn scope2026-11-14
velocity.g.informatica.comIn scope2026-11-14
www1.g.informatica.comIn scope2026-11-14
www4.g.informatica.comIn scope2026-11-14
wwwmicrolb.g.informatica.comIn scope2026-11-14
wwwt.g.informatica.comIn scope2026-11-14
gcsfiles.informatica.comIn scope2026-11-14
www.gcsfiles.informatica.comIn scope2026-11-14
gdc.informatica.comIn scope2026-11-14
www.gdc.informatica.comIn scope2026-11-14
expe.geo.informatica.comIn scope2026-11-14
vpn.geo.informatica.comvpnIn scope2026-11-14
vpn-test.geo.informatica.comtest, vpnIn scope2026-11-14
geoexpc01.informatica.comIn scope2026-11-14
geoexpc02.informatica.comIn scope2026-11-14
geoexpe01.informatica.comIn scope2026-11-14
geoexpe02.informatica.comIn scope2026-11-14
glube.informatica.comIn scope2026-11-14
go.informatica.comIn scope2026-11-14
go-test.informatica.comtestIn scope2026-11-14
guestportal.informatica.comIn scope2026-11-14
gw.informatica.comIn scope2026-11-14
gw1.informatica.comIn scope2026-11-14
gw2.informatica.comIn scope2026-11-14
hackathon.informatica.comIn scope2026-11-14
hawkscanners.informatica.comIn scope2026-11-14
hawkscanners02.informatica.comIn scope2026-11-14
www.hawkscanners02.informatica.comIn scope2026-11-14
help-test.informatica.comtestIn scope2026-11-14
helpdesk.informatica.comIn scope2026-11-14
hk-sbc1.informatica.comIn scope2026-11-14
www.hk-sbc1.informatica.comIn scope2026-11-14
hkgw.informatica.comIn scope2026-11-14
hobbes.informatica.comIn scope2026-11-14
hotnews.informatica.comIn scope2026-11-14
hygw.informatica.comIn scope2026-11-14
iaaecanada.informatica.comIn scope2026-11-14
icinp1.informatica.comIn scope2026-11-14
icinp2.informatica.comIn scope2026-11-14
icsdownload.informatica.comIn scope2026-11-14
icsdownloadsecure.informatica.comIn scope2026-11-14
ipa-ca.idm.informatica.comIn scope2026-11-14
psvilxidm08.idm.informatica.comIn scope2026-11-14
qyvilxidm07.idm.informatica.comIn scope2026-11-14
idmcservicerecomdev.informatica.comIn scope2026-11-14
idmcservicerecomprod.informatica.comIn scope2026-11-14
idmcservicerecomuat.informatica.comIn scope2026-11-14
iicsdevdockerhub.informatica.comIn scope2026-11-14
iirdemo.informatica.comIn scope2026-11-14
il.informatica.comIn scope2026-11-14
in.informatica.comIn scope2026-11-14
in-int-gw.informatica.comIn scope2026-11-14
in-sbc1.informatica.comIn scope2026-11-14
www.in-sbc1.informatica.comIn scope2026-11-14
in-sbc2.informatica.comIn scope2026-11-14
www.in-sbc2.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in