Bug bounty program
JE
JetBlue
Most upvoted reports7
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Sensitive information disclosure on grafanaAnalysed#1448218 | No weakness recorded | 2024-02-26 | – | 45 |
| Dom-Based XSS on parameter ?vsid=Analysed#1452149 | Cross-site Scripting | 2022-12-30 | – | 27 |
| Access to tomcat-manager with default credsAnalysed#1267174 | Authentication | 2023-02-05 | – | 24 |
| Open RedirectionAnalysed#1267176 | Open Redirect | 2023-02-05 | – | 21 |
| Open Redirect - https://████████.jetblue.com/███?url=Analysed#1851969 | Open Redirect | 2023-03-13 | – | 21 |
| Open Redirect#1457736 | Open Redirect | 2023-01-29 | – | 13 |
| XSS via Vuln Rendertron Instance At `██████████.jetblue.com/render/*`Analysed#1853061 | Cross-site Scripting | 2023-06-20 | – | 13 |
Subdomains938
| Name | Scope | First seen |
|---|---|---|
| kioskcheckinaz-qa2.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinaz-stg.jetblue.comstaging | In scope | 2026-11-14 |
| kioskcheckinazeus2.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinazwus2.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinegw.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinqa.jetblue.com | In scope | 2026-11-14 |
| www.kioskcheckinqa.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinqa2.jetblue.com | In scope | 2026-11-14 |
| www.kioskcheckinqa2.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinstg.jetblue.com | In scope | 2026-11-14 |
| www.kioskcheckinstg.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinstgaz.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinstgazeus2.jetblue.com | In scope | 2026-11-14 |
| kioskcheckinstgazwus2.jetblue.com | In scope | 2026-11-14 |
| kioskmanagement.jetblue.com | In scope | 2026-11-14 |
| www.kioskmanagement.jetblue.com | In scope | 2026-11-14 |
| kioskmanager.jetblue.com | In scope | 2026-11-14 |
| kioskmanagertest.jetblue.com | In scope | 2026-11-14 |
| learningportal.jetblue.com | In scope | 2026-11-14 |
| limos.jetblue.com | In scope | 2026-11-14 |
| lync.jetblue.com | In scope | 2026-11-14 |
| lyncdiscover.jetblue.com | In scope | 2026-11-14 |
| m-empower.jetblue.com | In scope | 2026-11-14 |
| m-empowerbackup.jetblue.com | In scope | 2026-11-14 |
| m-empowerlab.jetblue.com | In scope | 2026-11-14 |
| magnolia.jetblue.com | In scope | 2026-11-14 |
| mail.jetblue.commail | In scope | 2026-11-14 |
| mail1.jetblue.commail | In scope | 2026-11-14 |
| mail2.jetblue.commail | In scope | 2026-11-14 |
| mail5.jetblue.commail | In scope | 2026-11-14 |
| mail7.jetblue.commail | In scope | 2026-11-14 |
| managetrips.jetblue.com | In scope | 2026-11-14 |
| media.jetblue.com | In scope | 2026-11-14 |
| mediaroom.jetblue.com | In scope | 2026-11-14 |
| www.mediaroom.jetblue.com | In scope | 2026-11-14 |
| messaging-forms.jetblue.com | In scope | 2026-11-14 |
| messaging-forms-demo.jetblue.comtest | In scope | 2026-11-14 |
| messaging-forms-preprod.jetblue.comstaging | In scope | 2026-11-14 |
| metrics.jetblue.commonitoring | In scope | 2026-11-14 |
| mi.jetblue.com | In scope | 2026-11-14 |
| mobile.jetblue.com | In scope | 2026-11-14 |
| mobile2.jetblue.com | In scope | 2026-11-14 |
| mobilecheckin.jetblue.com | In scope | 2026-11-14 |
| mobilecontent.jetblue.com | In scope | 2026-11-14 |
| mobilecontent-stg.jetblue.comstaging | In scope | 2026-11-14 |
| mobiledevicesportal.jetblue.com | In scope | 2026-11-14 |
| movil.jetblue.com | In scope | 2026-11-14 |
| my.jetblue.com | In scope | 2026-11-14 |
| myflights.jetblue.com | In scope | 2026-11-14 |
| navigationdatacheck.jetblue.com | In scope | 2026-11-14 |
| navtechpbs.jetblue.com | In scope | 2026-11-14 |
| ndcpayprd.jetblue.com | In scope | 2026-11-14 |
| ndcprd.jetblue.com | In scope | 2026-11-14 |
| newblueconnect.jetblue.com | In scope | 2026-11-14 |
| news.jetblue.com | In scope | 2026-11-14 |
| www.news.jetblue.com | In scope | 2026-11-14 |
| nextkioskcheckin.jetblue.com | In scope | 2026-11-14 |
| nextkioskcheckinaz.jetblue.com | In scope | 2026-11-14 |
| ngapps.jetblue.com | In scope | 2026-11-14 |
| ngstore.jetblue.com | In scope | 2026-11-14 |
| nkp-mgmt.jetblue.com | In scope | 2026-11-14 |
| nkp-mgmt-nprd.jetblue.com | In scope | 2026-11-14 |
| nkp-mgmt-prd.jetblue.com | In scope | 2026-11-14 |
| nkp-orgeng.jetblue.com | In scope | 2026-11-14 |
| cuaprd.nkp-orgeng.jetblue.com | In scope | 2026-11-14 |
| cuastg.nkp-orgeng.jetblue.com | In scope | 2026-11-14 |
| dev.nkp-orgeng.jetblue.comdev | In scope | 2026-11-14 |
| egwprd.nkp-orgeng.jetblue.com | In scope | 2026-11-14 |
| egwstg.nkp-orgeng.jetblue.com | In scope | 2026-11-14 |
| qa.nkp-orgeng.jetblue.comtest | In scope | 2026-11-14 |
| nonprodclientcert.jetblue.com | In scope | 2026-11-14 |
| nprdase.jetblue.com | In scope | 2026-11-14 |
| scm.nprdase.jetblue.comgit | In scope | 2026-11-14 |
| ns01.jetblue.com | In scope | 2026-11-14 |
| ns02.jetblue.com | In scope | 2026-11-14 |
| ns1.jetblue.com | In scope | 2026-11-14 |
| ns2.jetblue.com | In scope | 2026-11-14 |
| nstest-dev-orgeng.jetblue.comdev | In scope | 2026-11-14 |
| nxtctsconfig-eus2-prd.jetblue.com | In scope | 2026-11-14 |
| nxtctsconfig-prd.jetblue.com | In scope | 2026-11-14 |
| nxtctsconfig-wus2-prd.jetblue.com | In scope | 2026-11-14 |
| nxtkioskcheckinazeus2.jetblue.com | In scope | 2026-11-14 |
| ocspool1.jetblue.com | In scope | 2026-11-14 |
| oldservicedesk.jetblue.com | In scope | 2026-11-14 |
| omnistats.jetblue.com | In scope | 2026-11-14 |
| opsdata.jetblue.com | In scope | 2026-11-14 |
| dev.orgeng.jetblue.comdev | In scope | 2026-11-14 |
| origin-content.jetblue.com | In scope | 2026-11-14 |
| origin-www.jetblue.com | In scope | 2026-11-14 |
| oschotspot01.jetblue.com | In scope | 2026-11-14 |
| oschotspot02.jetblue.com | In scope | 2026-11-14 |
| owa.jetblue.commail | In scope | 2026-11-14 |
| paisly.jetblue.com | In scope | 2026-11-14 |
| api.paisly.jetblue.comapi | In scope | 2026-11-14 |
| apiuat.paisly.jetblue.com | In scope | 2026-11-14 |
| offermaker-carrental-airwaysinpath.paisly.jetblue.com | In scope | 2026-11-14 |
| offermakercarrental.paisly.jetblue.com | In scope | 2026-11-14 |
| offermakercarrental-airwayscheckinpath.paisly.jetblue.com | In scope | 2026-11-14 |
| offermakerhotels.paisly.jetblue.com | In scope | 2026-11-14 |
| offerupdatecarrental.paisly.jetblue.com | In scope | 2026-11-14 |
933 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.