Bug bounty program
JE
JetBlue
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Sensitive information disclosure on grafanaAnalysed#1448218 | No weakness recorded | 2024-02-26 | – | 45 |
| Dom-Based XSS on parameter ?vsid=Analysed#1452149 | Cross-site Scripting | 2022-12-30 | – | 27 |
| Access to tomcat-manager with default credsAnalysed#1267174 | Authentication | 2023-02-05 | – | 24 |
| Open RedirectionAnalysed#1267176 | Open Redirect | 2023-02-05 | – | 21 |
| Open Redirect - https://████████.jetblue.com/███?url=Analysed#1851969 | Open Redirect | 2023-03-13 | – | 21 |
| Open Redirect#1457736 | Open Redirect | 2023-01-29 | – | 13 |
| XSS via Vuln Rendertron Instance At `██████████.jetblue.com/render/*`#1853061 | Cross-site Scripting | 2023-06-20 | – | 13 |
Subdomains938
| Name | Scope | First seen |
|---|---|---|
| empowerlab.jetblue.com | In scope | 2026-11-14 |
| experience.jetblue.com | In scope | 2026-11-14 |
| feeds.jetblue.com | In scope | 2026-11-14 |
| fk.jetblue.com | In scope | 2026-11-14 |
| fk-nonprod.jetblue.com | In scope | 2026-11-14 |
| fk-training.jetblue.com | In scope | 2026-11-14 |
| fkmq.jetblue.com | In scope | 2026-11-14 |
| fkmq-ext.jetblue.com | In scope | 2026-11-14 |
| fkmq-nonprod.jetblue.com | In scope | 2026-11-14 |
| fkmq-nonprod-ext.jetblue.com | In scope | 2026-11-14 |
| fkmq-training.jetblue.com | In scope | 2026-11-14 |
| flightcrewweb.jetblue.com | In scope | 2026-11-14 |
| flybuy.jetblue.com | In scope | 2026-11-14 |
| flybuypay.jetblue.com | In scope | 2026-11-14 |
| fonts.jetblue.com | In scope | 2026-11-14 |
| foundations.jetblue.com | In scope | 2026-11-14 |
| www.foundations.jetblue.com | In scope | 2026-11-14 |
| fs.jetblue.com | In scope | 2026-11-14 |
| fsnonprod.jetblue.com | In scope | 2026-11-14 |
| fsnt-prd-egw.jetblue.com | In scope | 2026-11-14 |
| fsnt-prod-cua.jetblue.com | In scope | 2026-11-14 |
| fsnt-stg-cua.jetblue.comstaging | In scope | 2026-11-14 |
| fsntui.jetblue.com | In scope | 2026-11-14 |
| fsntui-stg.jetblue.comstaging | In scope | 2026-11-14 |
| ftp.jetblue.comdata | In scope | 2026-11-14 |
| ftweb.jetblue.com | In scope | 2026-11-14 |
| canjear.getaways.jetblue.com | In scope | 2026-11-14 |
| redeem.getaways.jetblue.com | In scope | 2026-11-14 |
| giftcards.jetblue.com | In scope | 2026-11-14 |
| go.jetblue.com | In scope | 2026-11-14 |
| ground.jetblue.com | In scope | 2026-11-14 |
| groups.jetblue.com | In scope | 2026-11-14 |
| www.groups.jetblue.com | In scope | 2026-11-14 |
| gslb.jetblue.com | In scope | 2026-11-14 |
| appaccess.gslb.jetblue.com | In scope | 2026-11-14 |
| desktop.gslb.jetblue.com | In scope | 2026-11-14 |
| tf-jbdesktop.gslb.jetblue.com | In scope | 2026-11-14 |
| gslbns1.jetblue.com | In scope | 2026-11-14 |
| gslbns2.jetblue.com | In scope | 2026-11-14 |
| guestportal.jetblue.com | In scope | 2026-11-14 |
| hec.jetblue.com | In scope | 2026-11-14 |
| us1.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbcp8cc01.us1.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbcp8cc02.us1.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbwp1wd01.us1.hec.jetblue.com | In scope | 2026-11-14 |
| www.vhjtbwp1wd01.us1.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbwp2wd01.us1.hec.jetblue.com | In scope | 2026-11-14 |
| www.vhjtbwp2wd01.us1.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbwp1wd01.us4.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbwp2wd01.us4.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbcp8cc01.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbcp8cc02.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbep1cs.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbjp1ai01.hec.jetblue.com | In scope | 2026-11-14 |
| vhjtbjp1ci.hec.jetblue.com | In scope | 2026-11-14 |
| help.jetblue.com | In scope | 2026-11-14 |
| hola.jetblue.com | In scope | 2026-11-14 |
| hola-book.jetblue.com | In scope | 2026-11-14 |
| hola-trueblue.jetblue.com | In scope | 2026-11-14 |
| www.hola-trueblue.jetblue.com | In scope | 2026-11-14 |
| hola-truebluetest.jetblue.com | In scope | 2026-11-14 |
| holastg2.jetblue.com | In scope | 2026-11-14 |
| hotels.jetblue.com | In scope | 2026-11-14 |
| www.hotels.jetblue.com | In scope | 2026-11-14 |
| hotspotportal.jetblue.com | In scope | 2026-11-14 |
| prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| cobrand.prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| jbi.prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| jbndc.prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| jbp.prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| pay.prd.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| qa2.cua.ibx.jetblue.com | In scope | 2026-11-14 |
| stg.cua.ibx.jetblue.comstaging | In scope | 2026-11-14 |
| book.stg.cua.ibx.jetblue.comstaging | In scope | 2026-11-14 |
| prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| cobrand.prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| jbi.prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| jbndc.prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| jbp.prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| pay.prd.egw.ibx.jetblue.com | In scope | 2026-11-14 |
| ids-fwi-contentmgrplr.jetblue.com | In scope | 2026-11-14 |
| ids-fwi-contentmgrplr-stg.jetblue.comstaging | In scope | 2026-11-14 |
| ids-fwi-contentmgrwebadm.jetblue.com | In scope | 2026-11-14 |
| ids-fwi-contentmgrwebadm-stg.jetblue.comstaging | In scope | 2026-11-14 |
| ids-fwi-intsvcs.jetblue.com | In scope | 2026-11-14 |
| ids-fwi-intsvcs-stg.jetblue.comstaging | In scope | 2026-11-14 |
| ids-fwi-svcs.jetblue.com | In scope | 2026-11-14 |
| ids-fwi-svcs-stg.jetblue.comstaging | In scope | 2026-11-14 |
| info.jetblue.com | In scope | 2026-11-14 |
| omptrans.info.jetblue.com | In scope | 2026-11-14 |
| travelbank.int.jetblue.com | In scope | 2026-11-14 |
| www.travelbank.int.jetblue.com | In scope | 2026-11-14 |
| intranet.jetblue.cominternal | In scope | 2026-11-14 |
| inventoryoptimizer.jetblue.com | In scope | 2026-11-14 |
| investor.jetblue.com | In scope | 2026-11-14 |
| www.investor.jetblue.com | In scope | 2026-11-14 |
| ir.jetblue.com | In scope | 2026-11-14 |
| www.ir.jetblue.com | In scope | 2026-11-14 |
| it.jetblue.com | In scope | 2026-11-14 |
| 030098f2bd3ed9fec0ad32af0a1a95311c687302.it.jetblue.com | In scope | 2026-11-14 |
933 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.