Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
5
Disclosed reports
68
Subdomains
1,177

Most upvoted reports68

All reports
Most upvoted reports of Informatica
ReportWeaknessDisclosedBountyVotes
XXE through injection of a payload in the XMP metadata of a JPEG fileAnalysed#836877Injection and Smuggling2020-04-21–138
No rate limiting on form[register]#2583500Access Control––109
Blind SQL injection at tsftp.informatica.com#1034625SQL Injection2020-11-16–68
[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell Possible#147196Command and Code Injection2016-12-31–50
[rev-app.informatica.com] - XXE#105434Denial of Service2016-08-02–45
[ipm.informatica.com] Sql injection Oracle#178057SQL Injection2017-01-21–28
..; bypass leading to tomcat scripts [Unauthenticated]#1004007Access Control2020-10-13–27
Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833Cross-site Scripting2020-10-13–27
[app.informaticaondemand.com] XXE#105753Denial of Service2017-04-08–25
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348Information Disclosure2019-08-06–24

Subdomains1,177

Subdomains of Informatica
NameScopeFirst seen
passport-test.informatica.comtestIn scope2026-11-14
www.passport-test.informatica.comtestIn scope2026-11-14
www.passport.informatica.comIn scope2026-11-14
plgw.informatica.comIn scope2026-11-14
portal.informatica.comIn scope2026-11-14
pr-mx1.informatica.comIn scope2026-11-14
pr1.informatica.comIn scope2026-11-14
pr2.informatica.comIn scope2026-11-14
presaleschatbotprod.informatica.comIn scope2026-11-14
presaleschatbotqa.informatica.comIn scope2026-11-14
www.presaleschatbotqa.informatica.comIn scope2026-11-14
presidio.informatica.comIn scope2026-11-14
product360.informatica.comIn scope2026-11-14
www.product360.informatica.comIn scope2026-11-14
ps28smp01.informatica.comIn scope2026-11-14
ps28smp02.informatica.comIn scope2026-11-14
www.ps28smp02.informatica.comIn scope2026-11-14
ps28smp03.informatica.comIn scope2026-11-14
psexpc01.informatica.comIn scope2026-11-14
psexpc02.informatica.comIn scope2026-11-14
psexpccluster.informatica.comIn scope2026-11-14
psexpe01.informatica.comIn scope2026-11-14
psexpe02.informatica.comIn scope2026-11-14
psexpecluster.informatica.comIn scope2026-11-14
psks.informatica.comIn scope2026-11-14
pslxaldb1.informatica.comIn scope2026-11-14
pslxcm01.informatica.comIn scope2026-11-14
pslxcm01-ms.informatica.comIn scope2026-11-14
pslxcm02.informatica.comIn scope2026-11-14
pslxcm03.informatica.comIn scope2026-11-14
pslxcm04.informatica.comIn scope2026-11-14
pslxdevcm01.informatica.comIn scope2026-11-14
pslxdevcm01-ms.informatica.comIn scope2026-11-14
pslxdevcm02.informatica.comIn scope2026-11-14
pslxdevimp01.informatica.comIn scope2026-11-14
pslxdevum01.informatica.comIn scope2026-11-14
pslxdevum01-ms.informatica.comIn scope2026-11-14
pslxdevum02.informatica.comIn scope2026-11-14
pslxum01.informatica.comIn scope2026-11-14
pslxum01-ms.informatica.comIn scope2026-11-14
pslxum02.informatica.comIn scope2026-11-14
psuportal.informatica.comIn scope2026-11-14
psv16ftp3.informatica.comdataIn scope2026-11-14
psv16sam04.informatica.comIn scope2026-11-14
www.psv16sam04.informatica.comIn scope2026-11-14
psv16velp01.informatica.comIn scope2026-11-14
psv23altp02.informatica.comIn scope2026-11-14
psv23altp03.informatica.comIn scope2026-11-14
psv23smp02.informatica.comIn scope2026-11-14
psvbsddspext.informatica.comIn scope2026-11-14
psvglx79app01.informatica.comIn scope2026-11-14
www.psvglx79app01.informatica.comIn scope2026-11-14
psvi12embtest1.informatica.comIn scope2026-11-14
psvi28embotics1.informatica.comIn scope2026-11-14
www.psvi28embotics1.informatica.comIn scope2026-11-14
psvi28excas01.informatica.comIn scope2026-11-14
psvi28excas02.informatica.comIn scope2026-11-14
psvi28excas03.informatica.comIn scope2026-11-14
psvi28excas04.informatica.comIn scope2026-11-14
psvi28excas05.informatica.comIn scope2026-11-14
psvi28sccm03.informatica.comIn scope2026-11-14
psvi28sccm04.informatica.comIn scope2026-11-14
psvi28smpss01.informatica.comIn scope2026-11-14
www.psvi28smpss01.informatica.comIn scope2026-11-14
psvi28smpss03.informatica.comIn scope2026-11-14
psvi28smpss04.informatica.comIn scope2026-11-14
psvlxaehlp.informatica.comIn scope2026-11-14
psvlxipcat01.informatica.comIn scope2026-11-14
psvxpalct.informatica.comIn scope2026-11-14
pulse.informatica.comIn scope2026-11-14
pulse-stage.informatica.comstagingIn scope2026-11-14
pwreset.informatica.comIn scope2026-11-14
pwresetregistration.informatica.comIn scope2026-11-14
qa-icsdownloadsecure.informatica.comtestIn scope2026-11-14
quarantine.informatica.comIn scope2026-11-14
www.quarantine.informatica.comIn scope2026-11-14
qy-sbc1.informatica.comIn scope2026-11-14
qy-sbc2.informatica.comIn scope2026-11-14
qyexpc01.informatica.comIn scope2026-11-14
qyexpc02.informatica.comIn scope2026-11-14
qyexpccluster.informatica.comIn scope2026-11-14
qyexpe01.informatica.comIn scope2026-11-14
qyexpe02.informatica.comIn scope2026-11-14
qyexpecluster.informatica.comIn scope2026-11-14
qygw.informatica.comIn scope2026-11-14
qylxcm01.informatica.comIn scope2026-11-14
qylxcm01-ms.informatica.comIn scope2026-11-14
qylxcm02.informatica.comIn scope2026-11-14
qylxcm03.informatica.comIn scope2026-11-14
qylximp01.informatica.comIn scope2026-11-14
qylximp02.informatica.comIn scope2026-11-14
qylxum01.informatica.comIn scope2026-11-14
qylxum01-ms.informatica.comIn scope2026-11-14
qynagiosxip01.informatica.comIn scope2026-11-14
qythrukp01.informatica.comIn scope2026-11-14
qyv12embotics1.informatica.comIn scope2026-11-14
qyv12testftp1.informatica.comIn scope2026-11-14
qyv12tsftp01.informatica.comIn scope2026-11-14
qyv16oktap01.informatica.comIn scope2026-11-14
www.qyv16oktap01.informatica.comIn scope2026-11-14

1,177 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in