Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
mr3.informatica.comIn scope2026-11-14
email.mx.informatica.commailIn scope2026-11-14
mxgw.informatica.comIn scope2026-11-14
my.informatica.comIn scope2026-11-14
my-dev.informatica.comdevIn scope2026-11-14
www.my-dev.informatica.comdevIn scope2026-11-14
my-prod.informatica.comIn scope2026-11-14
my-sit.informatica.comtestIn scope2026-11-14
www.my-sit.informatica.comtestIn scope2026-11-14
my-test.informatica.comtestIn scope2026-11-14
my-uat.informatica.comtestIn scope2026-11-14
www.my-uat.informatica.comtestIn scope2026-11-14
www.my.informatica.comIn scope2026-11-14
mydevices.informatica.comIn scope2026-11-14
myinformatica.informatica.comIn scope2026-11-14
mypath.informatica.comIn scope2026-11-14
www.mypath.informatica.comIn scope2026-11-14
myprod.informatica.comIn scope2026-11-14
mysupport.informatica.comIn scope2026-11-14
mysupport-test.informatica.comtestIn scope2026-11-14
www.mysupport-test.informatica.comtestIn scope2026-11-14
www.mysupport.informatica.comIn scope2026-11-14
mysupportlogin-test.informatica.comtestIn scope2026-11-14
www.mysupportlogin-test.informatica.comtestIn scope2026-11-14
mysupportsecure-test.informatica.comtestIn scope2026-11-14
www.mysupportsecure-test.informatica.comtestIn scope2026-11-14
mysupportsecuretest.informatica.comIn scope2026-11-14
mysupporttest.informatica.comIn scope2026-11-14
n.informatica.comIn scope2026-11-14
www.n.informatica.comIn scope2026-11-14
nagios-grafana.informatica.commonitoringIn scope2026-11-14
nagiosxi.informatica.comIn scope2026-11-14
nam.informatica.comIn scope2026-11-14
nbu.informatica.comIn scope2026-11-14
neighborhood.informatica.comIn scope2026-11-14
neo1.informatica.comIn scope2026-11-14
neo2.informatica.comIn scope2026-11-14
network.informatica.comIn scope2026-11-14
network-dev.informatica.comdevIn scope2026-11-14
network-poc.informatica.comIn scope2026-11-14
network-sit.informatica.comtestIn scope2026-11-14
www.network-sit.informatica.comtestIn scope2026-11-14
network-test.informatica.comtestIn scope2026-11-14
www.network-test.informatica.comtestIn scope2026-11-14
www.network.informatica.comIn scope2026-11-14
nextops.informatica.comIn scope2026-11-14
nlgw.informatica.comIn scope2026-11-14
now.informatica.comIn scope2026-11-14
now-test.informatica.comtestIn scope2026-11-14
npgw.informatica.comIn scope2026-11-14
nprditk8sregistry.informatica.comIn scope2026-11-14
ny-sbc1.informatica.comIn scope2026-11-14
nygw.informatica.comIn scope2026-11-14
o365.informatica.comIn scope2026-11-14
ondemandtraining.informatica.comIn scope2026-11-14
oneclickdrsfdc.informatica.comIn scope2026-11-14
oneclickdrsfdc-test.informatica.comtestIn scope2026-11-14
www.oneclickdrsfdc-test.informatica.comtestIn scope2026-11-14
www.oneclickdrsfdc.informatica.comIn scope2026-11-14
oneclickdrsfdctest.informatica.comIn scope2026-11-14
onlinehelp.informatica.comIn scope2026-11-14
onyx2.informatica.comIn scope2026-11-14
ops-container-registry.informatica.comtoolsIn scope2026-11-14
ops360.informatica.comIn scope2026-11-14
www.ops360.informatica.comIn scope2026-11-14
opstest.informatica.comIn scope2026-11-14
orange.informatica.comIn scope2026-11-14
origin-communities.informatica.comIn scope2026-11-14
origin-community-test.informatica.comtestIn scope2026-11-14
origin-download.informatica.comIn scope2026-11-14
origin-download-test.informatica.comtestIn scope2026-11-14
www.origin-download.informatica.comIn scope2026-11-14
origin-download2.informatica.comIn scope2026-11-14
origin-my-prod3.informatica.comIn scope2026-11-14
origin-my-test2.informatica.comtestIn scope2026-11-14
origin-my-test3.informatica.comtestIn scope2026-11-14
origin-www1.informatica.comIn scope2026-11-14
origin-www2.informatica.comIn scope2026-11-14
origin-wwwnew.informatica.comIn scope2026-11-14
origin-wwwtest.informatica.comIn scope2026-11-14
originwww2.informatica.comIn scope2026-11-14
originwwwnew.informatica.comIn scope2026-11-14
owa.informatica.commailIn scope2026-11-14
owa5.informatica.commailIn scope2026-11-14
pagw.informatica.comIn scope2026-11-14
palm.informatica.comIn scope2026-11-14
parc.informatica.comIn scope2026-11-14
parc-sc.informatica.comIn scope2026-11-14
www.parc-sc.informatica.comIn scope2026-11-14
www.parc.informatica.comIn scope2026-11-14
parrot.informatica.comIn scope2026-11-14
partners.informatica.comIn scope2026-11-14
partners-alpha.informatica.comstagingIn scope2026-11-14
partners-dev.informatica.comdevIn scope2026-11-14
partners-dev3.informatica.comdevIn scope2026-11-14
partners-dev65.informatica.comdevIn scope2026-11-14
partners-qa.informatica.comtestIn scope2026-11-14
partners-sit.informatica.comtestIn scope2026-11-14
partners-stage.informatica.comstagingIn scope2026-11-14
passport.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in