Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
itenablement.informatica.comIn scope2026-11-14
itk8sregistry.informatica.comIn scope2026-11-14
itvideos.informatica.comIn scope2026-11-14
iw-alpha.informatica.comstagingIn scope2026-11-14
iw-dev.informatica.comdevIn scope2026-11-14
iw-dev65.informatica.comdevIn scope2026-11-14
iw-stage.informatica.comstagingIn scope2026-11-14
iw2023.informatica.comIn scope2026-11-14
iwww1.informatica.comIn scope2026-11-14
jobs.informatica.comIn scope2026-11-14
jpremote.informatica.comIn scope2026-11-14
www.jpremote.informatica.comIn scope2026-11-14
jrgw.informatica.comIn scope2026-11-14
jss.informatica.comIn scope2026-11-14
www.jss.informatica.comIn scope2026-11-14
jsslab.informatica.comIn scope2026-11-14
www.jsslab.informatica.comIn scope2026-11-14
kb.informatica.comIn scope2026-11-14
kb-sfdc.informatica.comIn scope2026-11-14
www.kb-sfdc.informatica.comIn scope2026-11-14
kb-test.informatica.comtestIn scope2026-11-14
www.kb-test.informatica.comtestIn scope2026-11-14
kb-uno.informatica.comIn scope2026-11-14
www.kb-uno.informatica.comIn scope2026-11-14
www.kb.informatica.comIn scope2026-11-14
kbcrawl.informatica.comIn scope2026-11-14
www.kbcrawl.informatica.comIn scope2026-11-14
kbsfdc.informatica.comIn scope2026-11-14
kbtestcrawl.informatica.comIn scope2026-11-14
kbuno.informatica.comIn scope2026-11-14
knowledge.informatica.comIn scope2026-11-14
knowledge-dev.informatica.comdevIn scope2026-11-14
knowledge-sit.informatica.comtestIn scope2026-11-14
www.knowledge-sit.informatica.comtestIn scope2026-11-14
knowledge-test.informatica.comtestIn scope2026-11-14
www.knowledge-test.informatica.comtestIn scope2026-11-14
www.knowledge.informatica.comIn scope2026-11-14
kr.informatica.comIn scope2026-11-14
krgw.informatica.comIn scope2026-11-14
www.krgw.informatica.comIn scope2026-11-14
kz-sbc1.informatica.comIn scope2026-11-14
kzgw.informatica.comIn scope2026-11-14
lam.informatica.comIn scope2026-11-14
ldgw.informatica.comIn scope2026-11-14
licensekeygen.informatica.comIn scope2026-11-14
licensekeygen-test.informatica.comtestIn scope2026-11-14
www.licensekeygen-test.informatica.comtestIn scope2026-11-14
www.licensekeygen.informatica.comIn scope2026-11-14
life.informatica.comIn scope2026-11-14
life-test.informatica.comtestIn scope2026-11-14
lists.informatica.comIn scope2026-11-14
loft.informatica.comIn scope2026-11-14
login.informatica.comauthIn scope2026-11-14
logindev.informatica.comIn scope2026-11-14
logintest.informatica.comIn scope2026-11-14
lombard.informatica.comIn scope2026-11-14
lr1.informatica.comIn scope2026-11-14
lr2.informatica.comIn scope2026-11-14
lr3.informatica.comIn scope2026-11-14
magellan.informatica.comIn scope2026-11-14
mail.informatica.commailIn scope2026-11-14
mailext.informatica.comIn scope2026-11-14
mailext1.informatica.comIn scope2026-11-14
marconi.informatica.comIn scope2026-11-14
marketplace.informatica.comIn scope2026-11-14
marketplace-alpha.informatica.comstagingIn scope2026-11-14
marketplace-dev.informatica.comdevIn scope2026-11-14
marketplace-dev3.informatica.comdevIn scope2026-11-14
marketplace-dev65.informatica.comdevIn scope2026-11-14
marketplace-qa.informatica.comtestIn scope2026-11-14
marketplace-sit.informatica.comtestIn scope2026-11-14
marketplace-stage.informatica.comstagingIn scope2026-11-14
marketplace-test.informatica.comtestIn scope2026-11-14
www.marketplace-test.informatica.comtestIn scope2026-11-14
marketplaceapi.informatica.comIn scope2026-11-14
marketplaceapi-test.informatica.comtestIn scope2026-11-14
mbgw.informatica.comIn scope2026-11-14
mdgw.informatica.comIn scope2026-11-14
mdmmaven01.informatica.comIn scope2026-11-14
mdmnextci.informatica.comIn scope2026-11-14
mend.informatica.comIn scope2026-11-14
www.mend.informatica.comIn scope2026-11-14
mendtest.informatica.comIn scope2026-11-14
www.mendtest.informatica.comIn scope2026-11-14
metrics.informatica.commonitoringIn scope2026-11-14
metrics-image.informatica.commonitoringIn scope2026-11-14
mhgw.informatica.comIn scope2026-11-14
mhlxcm01.informatica.comIn scope2026-11-14
mhlxcm01-ms.informatica.comIn scope2026-11-14
mhlxcm02.informatica.comIn scope2026-11-14
mhlxum01.informatica.comIn scope2026-11-14
mhlxum01-ms.informatica.comIn scope2026-11-14
mhvi28smpss01.informatica.comIn scope2026-11-14
mlgw.informatica.comIn scope2026-11-14
mobiledemo.informatica.comIn scope2026-11-14
monsrv1n.informatica.comIn scope2026-11-14
monusw2p.informatica.comIn scope2026-11-14
more.informatica.comIn scope2026-11-14
mr1.informatica.comIn scope2026-11-14
mr2.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in