Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
www.in.informatica.comIn scope2026-11-14
inch-sbc1.informatica.comIn scope2026-11-14
www.inch-sbc1.informatica.comIn scope2026-11-14
inda.informatica.comIn scope2026-11-14
indiamail.informatica.comIn scope2026-11-14
infa-license-test.informatica.comtestIn scope2026-11-14
www.infa-license-test.informatica.comtestIn scope2026-11-14
infa85web1.informatica.comIn scope2026-11-14
infa85web2.informatica.comIn scope2026-11-14
infa85web3.informatica.comIn scope2026-11-14
infa85web4.informatica.comIn scope2026-11-14
infa85web5.informatica.comIn scope2026-11-14
infa85web6.informatica.comIn scope2026-11-14
infa85web7.informatica.comIn scope2026-11-14
infachatgpt.informatica.comIn scope2026-11-14
www.infachatgpt.informatica.comIn scope2026-11-14
infacmgv2.informatica.comIn scope2026-11-14
infademo.informatica.comIn scope2026-11-14
infaghwebhook.informatica.comIn scope2026-11-14
www.infaghwebhook.informatica.comIn scope2026-11-14
infajira.informatica.comIn scope2026-11-14
infajira-dr.informatica.comIn scope2026-11-14
www.infajira.informatica.comIn scope2026-11-14
infajiradev.informatica.comIn scope2026-11-14
infajiratest.informatica.comIn scope2026-11-14
www.infajiratest.informatica.comIn scope2026-11-14
infapassport-preview-saml-slo-signing.informatica.comauth, stagingIn scope2026-11-14
www.infapassport-preview-saml-slo-signing.informatica.comauth, stagingIn scope2026-11-14
infapassport-prod-saml-slo-signing.informatica.comauthIn scope2026-11-14
www.infapassport-prod-saml-slo-signing.informatica.comauthIn scope2026-11-14
infaprint.informatica.comIn scope2026-11-14
www.infaprint.informatica.comIn scope2026-11-14
infareview.informatica.comIn scope2026-11-14
infashop.informatica.comIn scope2026-11-14
infawificonnect.informatica.comIn scope2026-11-14
infawiki.informatica.comIn scope2026-11-14
infawiki-dr.informatica.comIn scope2026-11-14
www.infawiki.informatica.comIn scope2026-11-14
infawikitest.informatica.comIn scope2026-11-14
www.infawikitest.informatica.comIn scope2026-11-14
informatica-gw.informatica.comIn scope2026-11-14
informaticaworld-dev3.informatica.comdevIn scope2026-11-14
informaticaworld-sit.informatica.comtestIn scope2026-11-14
inglx78.informatica.comIn scope2026-11-14
ingw.informatica.comIn scope2026-11-14
inhy-sbc1.informatica.comIn scope2026-11-14
inhy-sbc1-bak.informatica.comlegacyIn scope2026-11-14
www.inhy-sbc1.informatica.comIn scope2026-11-14
inlxcm01.informatica.comIn scope2026-11-14
inlxcm01-ms.informatica.comIn scope2026-11-14
inlxcm02.informatica.comIn scope2026-11-14
inlxcm03.informatica.comIn scope2026-11-14
inlximp01.informatica.comIn scope2026-11-14
www.inlximp01.informatica.comIn scope2026-11-14
inlximp02.informatica.comIn scope2026-11-14
inlxunity01.informatica.comIn scope2026-11-14
inlxunity01-ms.informatica.comIn scope2026-11-14
inlxunity02.informatica.comIn scope2026-11-14
innovation.informatica.comIn scope2026-11-14
international.informatica.comIn scope2026-11-14
intranet.informatica.cominternalIn scope2026-11-14
www.intranet.informatica.cominternalIn scope2026-11-14
inv16oktap01.informatica.comIn scope2026-11-14
inv16oktat01.informatica.comIn scope2026-11-14
www.inv16oktat01.informatica.comIn scope2026-11-14
inv73axond101.informatica.comIn scope2026-11-14
invcloudprod.informatica.comIn scope2026-11-14
invcloudprod2.informatica.comIn scope2026-11-14
investor.informatica.comIn scope2026-11-14
investors.informatica.comIn scope2026-11-14
invexternal.informatica.comIn scope2026-11-14
www.invexternal.informatica.comIn scope2026-11-14
invi12oktap01.informatica.comIn scope2026-11-14
invi12oktat01.informatica.comIn scope2026-11-14
invi28smpss01.informatica.comIn scope2026-11-14
invpdgw.informatica.comIn scope2026-11-14
www.invpdgw.informatica.comIn scope2026-11-14
invpn.informatica.comIn scope2026-11-14
www.invpn.informatica.comIn scope2026-11-14
invrh78eops01.informatica.comIn scope2026-11-14
inwgv5nds3-aad.informatica.comIn scope2026-11-14
www.inwgv5nds3-aad.informatica.comIn scope2026-11-14
inwpf1kt6mr-aad.informatica.comIn scope2026-11-14
inwpf386w3j-aad.informatica.comIn scope2026-11-14
iod.informatica.comIn scope2026-11-14
ip-198-202-141-42.informatica.comIn scope2026-11-14
ipssurvey.informatica.comIn scope2026-11-14
ismtp.informatica.comIn scope2026-11-14
it.informatica.comIn scope2026-11-14
itbot.informatica.comIn scope2026-11-14
itbottest.informatica.comIn scope2026-11-14
itclopsdev-ls.informatica.comIn scope2026-11-14
itcloud.informatica.comIn scope2026-11-14
itcloudagent.informatica.comIn scope2026-11-14
itcloudtest.informatica.comIn scope2026-11-14
itelkapp001.informatica.comIn scope2026-11-14
itelkapp003.informatica.comIn scope2026-11-14
itelkapp004.informatica.comIn scope2026-11-14
itemp.informatica.comIn scope2026-11-14
www.itemp.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in