Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
16
Disclosed reports
7
Subdomains
938

Most upvoted reports7

Most upvoted reports of JetBlue
ReportWeaknessDisclosedBountyVotes
Sensitive information disclosure on grafanaAnalysed#1448218No weakness recorded2024-02-26–45
Dom-Based XSS on parameter ?vsid=Analysed#1452149Cross-site Scripting2022-12-30–27
Access to tomcat-manager with default credsAnalysed#1267174Authentication2023-02-05–24
Open RedirectionAnalysed#1267176Open Redirect2023-02-05–21
Open Redirect - https://████████.jetblue.com/███?url=Analysed#1851969Open Redirect2023-03-13–21
Open Redirect#1457736Open Redirect2023-01-29–13
XSS via Vuln Rendertron Instance At `██████████.jetblue.com/render/*`#1853061Cross-site Scripting2023-06-20–13

Subdomains938

Subdomains of JetBlue
NameScopeFirst seen
empowerlab.jetblue.comIn scope2026-11-14
experience.jetblue.comIn scope2026-11-14
feeds.jetblue.comIn scope2026-11-14
fk.jetblue.comIn scope2026-11-14
fk-nonprod.jetblue.comIn scope2026-11-14
fk-training.jetblue.comIn scope2026-11-14
fkmq.jetblue.comIn scope2026-11-14
fkmq-ext.jetblue.comIn scope2026-11-14
fkmq-nonprod.jetblue.comIn scope2026-11-14
fkmq-nonprod-ext.jetblue.comIn scope2026-11-14
fkmq-training.jetblue.comIn scope2026-11-14
flightcrewweb.jetblue.comIn scope2026-11-14
flybuy.jetblue.comIn scope2026-11-14
flybuypay.jetblue.comIn scope2026-11-14
fonts.jetblue.comIn scope2026-11-14
foundations.jetblue.comIn scope2026-11-14
www.foundations.jetblue.comIn scope2026-11-14
fs.jetblue.comIn scope2026-11-14
fsnonprod.jetblue.comIn scope2026-11-14
fsnt-prd-egw.jetblue.comIn scope2026-11-14
fsnt-prod-cua.jetblue.comIn scope2026-11-14
fsnt-stg-cua.jetblue.comstagingIn scope2026-11-14
fsntui.jetblue.comIn scope2026-11-14
fsntui-stg.jetblue.comstagingIn scope2026-11-14
ftp.jetblue.comdataIn scope2026-11-14
ftweb.jetblue.comIn scope2026-11-14
canjear.getaways.jetblue.comIn scope2026-11-14
redeem.getaways.jetblue.comIn scope2026-11-14
giftcards.jetblue.comIn scope2026-11-14
go.jetblue.comIn scope2026-11-14
ground.jetblue.comIn scope2026-11-14
groups.jetblue.comIn scope2026-11-14
www.groups.jetblue.comIn scope2026-11-14
gslb.jetblue.comIn scope2026-11-14
appaccess.gslb.jetblue.comIn scope2026-11-14
desktop.gslb.jetblue.comIn scope2026-11-14
tf-jbdesktop.gslb.jetblue.comIn scope2026-11-14
gslbns1.jetblue.comIn scope2026-11-14
gslbns2.jetblue.comIn scope2026-11-14
guestportal.jetblue.comIn scope2026-11-14
hec.jetblue.comIn scope2026-11-14
us1.hec.jetblue.comIn scope2026-11-14
vhjtbcp8cc01.us1.hec.jetblue.comIn scope2026-11-14
vhjtbcp8cc02.us1.hec.jetblue.comIn scope2026-11-14
vhjtbwp1wd01.us1.hec.jetblue.comIn scope2026-11-14
www.vhjtbwp1wd01.us1.hec.jetblue.comIn scope2026-11-14
vhjtbwp2wd01.us1.hec.jetblue.comIn scope2026-11-14
www.vhjtbwp2wd01.us1.hec.jetblue.comIn scope2026-11-14
vhjtbwp1wd01.us4.hec.jetblue.comIn scope2026-11-14
vhjtbwp2wd01.us4.hec.jetblue.comIn scope2026-11-14
vhjtbcp8cc01.hec.jetblue.comIn scope2026-11-14
vhjtbcp8cc02.hec.jetblue.comIn scope2026-11-14
vhjtbep1cs.hec.jetblue.comIn scope2026-11-14
vhjtbjp1ai01.hec.jetblue.comIn scope2026-11-14
vhjtbjp1ci.hec.jetblue.comIn scope2026-11-14
help.jetblue.comIn scope2026-11-14
hola.jetblue.comIn scope2026-11-14
hola-book.jetblue.comIn scope2026-11-14
hola-trueblue.jetblue.comIn scope2026-11-14
www.hola-trueblue.jetblue.comIn scope2026-11-14
hola-truebluetest.jetblue.comIn scope2026-11-14
holastg2.jetblue.comIn scope2026-11-14
hotels.jetblue.comIn scope2026-11-14
www.hotels.jetblue.comIn scope2026-11-14
hotspotportal.jetblue.comIn scope2026-11-14
prd.cua.ibx.jetblue.comIn scope2026-11-14
cobrand.prd.cua.ibx.jetblue.comIn scope2026-11-14
jbi.prd.cua.ibx.jetblue.comIn scope2026-11-14
jbndc.prd.cua.ibx.jetblue.comIn scope2026-11-14
jbp.prd.cua.ibx.jetblue.comIn scope2026-11-14
pay.prd.cua.ibx.jetblue.comIn scope2026-11-14
qa2.cua.ibx.jetblue.comIn scope2026-11-14
stg.cua.ibx.jetblue.comstagingIn scope2026-11-14
book.stg.cua.ibx.jetblue.comstagingIn scope2026-11-14
prd.egw.ibx.jetblue.comIn scope2026-11-14
cobrand.prd.egw.ibx.jetblue.comIn scope2026-11-14
jbi.prd.egw.ibx.jetblue.comIn scope2026-11-14
jbndc.prd.egw.ibx.jetblue.comIn scope2026-11-14
jbp.prd.egw.ibx.jetblue.comIn scope2026-11-14
pay.prd.egw.ibx.jetblue.comIn scope2026-11-14
ids-fwi-contentmgrplr.jetblue.comIn scope2026-11-14
ids-fwi-contentmgrplr-stg.jetblue.comstagingIn scope2026-11-14
ids-fwi-contentmgrwebadm.jetblue.comIn scope2026-11-14
ids-fwi-contentmgrwebadm-stg.jetblue.comstagingIn scope2026-11-14
ids-fwi-intsvcs.jetblue.comIn scope2026-11-14
ids-fwi-intsvcs-stg.jetblue.comstagingIn scope2026-11-14
ids-fwi-svcs.jetblue.comIn scope2026-11-14
ids-fwi-svcs-stg.jetblue.comstagingIn scope2026-11-14
info.jetblue.comIn scope2026-11-14
omptrans.info.jetblue.comIn scope2026-11-14
travelbank.int.jetblue.comIn scope2026-11-14
www.travelbank.int.jetblue.comIn scope2026-11-14
intranet.jetblue.cominternalIn scope2026-11-14
inventoryoptimizer.jetblue.comIn scope2026-11-14
investor.jetblue.comIn scope2026-11-14
www.investor.jetblue.comIn scope2026-11-14
ir.jetblue.comIn scope2026-11-14
www.ir.jetblue.comIn scope2026-11-14
it.jetblue.comIn scope2026-11-14
030098f2bd3ed9fec0ad32af0a1a95311c687302.it.jetblue.comIn scope2026-11-14

933 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.