Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
usculxcas11v.am.sony.comNo domain scope published2026-11-14
usculxcas12v.am.sony.comNo domain scope published2026-11-14
usculxcas13v.am.sony.comNo domain scope published2026-11-14
usculxcas14v.am.sony.comNo domain scope published2026-11-14
usculxcas15v.am.sony.comNo domain scope published2026-11-14
usculxcas16v.am.sony.comNo domain scope published2026-11-14
usculxcas17v.am.sony.comNo domain scope published2026-11-14
usculxcas18v.am.sony.comNo domain scope published2026-11-14
usculxcas19v.am.sony.comNo domain scope published2026-11-14
usculxcas20v.am.sony.comNo domain scope published2026-11-14
usculxcas21v.am.sony.comNo domain scope published2026-11-14
usculxcas22v.am.sony.comNo domain scope published2026-11-14
usculxcassl01v.am.sony.comNo domain scope published2026-11-14
usculxcassl02v.am.sony.comNo domain scope published2026-11-14
usculxoff01v.am.sony.comNo domain scope published2026-11-14
usculxoff02v.am.sony.comNo domain scope published2026-11-14
usculxoff03v.am.sony.comNo domain scope published2026-11-14
usculxoff04v.am.sony.comNo domain scope published2026-11-14
usculxoff05v.am.sony.comNo domain scope published2026-11-14
usculxoff06v.am.sony.comNo domain scope published2026-11-14
usculxoff07v.am.sony.comNo domain scope published2026-11-14
usculxoff08v.am.sony.comNo domain scope published2026-11-14
usculxsnt01v.am.sony.comNo domain scope published2026-11-14
usculxsnt02v.am.sony.comNo domain scope published2026-11-14
usculxsnt03v.am.sony.comNo domain scope published2026-11-14
usculxsnt11v.am.sony.comNo domain scope published2026-11-14
usculxsnt12v.am.sony.comNo domain scope published2026-11-14
usculxsnt13v.am.sony.comNo domain scope published2026-11-14
usculxsntmt01v.am.sony.comNo domain scope published2026-11-14
usculxsntmt02v.am.sony.comNo domain scope published2026-11-14
usculyncav01v.am.sony.comNo domain scope published2026-11-14
usculyncav02v.am.sony.comNo domain scope published2026-11-14
usculyncavpool.am.sony.comNo domain scope published2026-11-14
usculyncedg.am.sony.comNo domain scope published2026-11-14
usculyncfe01v.am.sony.comNo domain scope published2026-11-14
usculyncfe02v.am.sony.comNo domain scope published2026-11-14
usculyncfe03v.am.sony.comNo domain scope published2026-11-14
usculyncfe04v.am.sony.comNo domain scope published2026-11-14
usculyncmed01v.am.sony.comNo domain scope published2026-11-14
usculyncmed02v.am.sony.comNo domain scope published2026-11-14
usculyncmedpool.am.sony.comNo domain scope published2026-11-14
usculzlarc.am.sony.comNo domain scope published2026-11-14
usdawas15v.am.sony.comNo domain scope published2026-11-14
usdc1cmmesxvcc01.am.sony.comNo domain scope published2026-11-14
usdc1dmzesxvcc01.am.sony.comNo domain scope published2026-11-14
usdc1nettest.am.sony.comNo domain scope published2026-11-14
usdc1rdgw01v.am.sony.comNo domain scope published2026-11-14
usdc1rdgw02v.am.sony.comNo domain scope published2026-11-14
usdc1vaash-aci.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-dev.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dev01.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dev02.am.sony.comdevNo domain scope published2026-11-14
usdc1vaash-f5-dmz.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-dmz01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-dmz02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-mon.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-mon01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-mon02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-scrt.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-scrt01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-scrt02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secloc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secloc01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secloc02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secsen.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secsen01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-secsen02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-sen01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-sen02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-vcmp.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-vcmp01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5-vcmp02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5vcmp.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5vcmp01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-f5vcmp02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-cer-pub01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-cer-pub01-ms.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-sme-pub01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-sme-pub01-ms.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucm-pub01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucm-pub01-ms.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucm-sub01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucm-sub02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucm-sub03.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucon-pub01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-ipt-ucon-pub01-ms.am.sony.comNo domain scope published2026-11-14
usdc1vaash-mgmt.am.sony.comNo domain scope published2026-11-14
usdc1vaash-mgmt01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-mgmt02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic-cimc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic01-cimc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic02.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic02-cimc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic03.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-apic03-cimc.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-firepower.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-firepower01.am.sony.comNo domain scope published2026-11-14
usdc1vaash-oob-firepower02.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated