Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
uslvekjci01.am.sony.comNo domain scope published2026-11-14
uslvekjci02.am.sony.comNo domain scope published2026-11-14
uslvekjci03.am.sony.comNo domain scope published2026-11-14
uslvekjci04.am.sony.comNo domain scope published2026-11-14
uslveldslb01.am.sony.comNo domain scope published2026-11-14
uslvelockit01.am.sony.comNo domain scope published2026-11-14
uslvelockitdev01.am.sony.comNo domain scope published2026-11-14
uslvembam01.am.sony.comNo domain scope published2026-11-14
uslveokta01.am.sony.comNo domain scope published2026-11-14
uslveoptimus01.am.sony.comNo domain scope published2026-11-14
uslveqahdsn01.am.sony.comNo domain scope published2026-11-14
uslveresilsys01.am.sony.comNo domain scope published2026-11-14
uslvesarchint01.am.sony.comNo domain scope published2026-11-14
uslvescngfrt01.am.sony.comNo domain scope published2026-11-14
uslveskynet01.am.sony.comNo domain scope published2026-11-14
uslveslkapp01.am.sony.comNo domain scope published2026-11-14
uslvespdevapp02.am.sony.comNo domain scope published2026-11-14
uslvespprdapp01.am.sony.comNo domain scope published2026-11-14
uslvespprdowafarm.am.sony.comNo domain scope published2026-11-14
uslvespqaowa01.am.sony.comNo domain scope published2026-11-14
uslvespstgapp01.am.sony.comNo domain scope published2026-11-14
uslvespwtrapp01.am.sony.comNo domain scope published2026-11-14
uslvetableau01.am.sony.comNo domain scope published2026-11-14
uslveuxweb01.am.sony.comNo domain scope published2026-11-14
usmadgit.am.sony.comNo domain scope published2026-11-14
usmadgit01.am.sony.comNo domain scope published2026-11-14
usnvlvsneihx01.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-cer-sub01.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-sme-sub01.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-ucm-sub04.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-ucm-sub05.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-ucm-sub06.am.sony.comNo domain scope published2026-11-14
usny25m-ipt-ucon-sub01.am.sony.comNo domain scope published2026-11-14
usphxspe-hxi01.am.sony.comNo domain scope published2026-11-14
ussdiocs01.am.sony.comNo domain scope published2026-11-14
ussdiocs02.am.sony.comNo domain scope published2026-11-14
ussdiocs03.am.sony.comNo domain scope published2026-11-14
ussdiocs04.am.sony.comNo domain scope published2026-11-14
ussdisadlds01.am.sony.comNo domain scope published2026-11-14
ussdisadlds01a.am.sony.comNo domain scope published2026-11-14
ussdisadlds01b.am.sony.comNo domain scope published2026-11-14
ussdisbld01.am.sony.comNo domain scope published2026-11-14
ussdisbld02.am.sony.comNo domain scope published2026-11-14
ussdisbld03.am.sony.comNo domain scope published2026-11-14
ussdisbld04.am.sony.comNo domain scope published2026-11-14
ussdisbld05.am.sony.comNo domain scope published2026-11-14
ussdisbldsl01.am.sony.comNo domain scope published2026-11-14
ussdisgithub01.am.sony.comNo domain scope published2026-11-14
ussdisgithub02.am.sony.comNo domain scope published2026-11-14
ussdisgithub03.am.sony.comNo domain scope published2026-11-14
ussdisgithub04.am.sony.comNo domain scope published2026-11-14
ussdisgithub05.am.sony.comNo domain scope published2026-11-14
ussdisjenkins01.am.sony.comNo domain scope published2026-11-14
ussdisjenkins02.am.sony.comNo domain scope published2026-11-14
ussdislockitprx01.am.sony.comNo domain scope published2026-11-14
ussdislockitprx02.am.sony.comNo domain scope published2026-11-14
ussdisokta01.am.sony.comNo domain scope published2026-11-14
www.ussdisokta01.am.sony.comNo domain scope published2026-11-14
ussdisokta02.am.sony.comNo domain scope published2026-11-14
ussdisokta04.am.sony.comNo domain scope published2026-11-14
ussdisokta05.am.sony.comNo domain scope published2026-11-14
ussdisp4web01.am.sony.comNo domain scope published2026-11-14
ussdispgp01.am.sony.comNo domain scope published2026-11-14
ussdispportal01.am.sony.comNo domain scope published2026-11-14
ussdisqaat01.am.sony.comNo domain scope published2026-11-14
ussdisqahdsn01.am.sony.comNo domain scope published2026-11-14
ussdisqatstrnr01.am.sony.comNo domain scope published2026-11-14
ussdisrb01.am.sony.comNo domain scope published2026-11-14
ussdisweb01.am.sony.comNo domain scope published2026-11-14
ussdiweb59v.am.sony.comNo domain scope published2026-11-14
ussdixcas11.am.sony.comNo domain scope published2026-11-14
ussdixcas12.am.sony.comNo domain scope published2026-11-14
ussdwlc01.am.sony.comNo domain scope published2026-11-14
ussfrsbuild02.am.sony.comNo domain scope published2026-11-14
ussfrsbuild03.am.sony.comNo domain scope published2026-11-14
ustcsjcetx01.am.sony.comNo domain scope published2026-11-14
usvaashdsm01-1.am.sony.comNo domain scope published2026-11-14
usvaclpdsm01-1.am.sony.comNo domain scope published2026-11-14
usvaclplibrenw01.am.sony.comNo domain scope published2026-11-14
veins.am.sony.comNo domain scope published2026-11-14
waketoru.am.sony.comNo domain scope published2026-11-14
sd.guest.wifi.am.sony.comNo domain scope published2026-11-14
wolftrack.am.sony.comNo domain scope published2026-11-14
www.am.sony.comNo domain scope published2026-11-14
106366-fw1.www.am.sony.comNo domain scope published2026-11-14
106367-web1.www.am.sony.comNo domain scope published2026-11-14
xdev-live.am.sony.comNo domain scope published2026-11-14
xdev-test.am.sony.comtestNo domain scope published2026-11-14
amhubdc6win01.sony.comNo domain scope published2026-11-14
ap.sony.comNo domain scope published2026-11-14
apkinxeg101.ap.sony.comNo domain scope published2026-11-14
apocspool01.ap.sony.comNo domain scope published2026-11-14
apsgsinsbc101.ap.sony.comNo domain scope published2026-11-14
www.apsgsinsbc101.ap.sony.comNo domain scope published2026-11-14
apyokxeg101.ap.sony.comNo domain scope published2026-11-14
apyokxeg102.ap.sony.comNo domain scope published2026-11-14
av.ap.sony.comNo domain scope published2026-11-14
content.ap.sony.comNo domain scope published2026-11-14
css.ap.sony.comNo domain scope published2026-11-14
download.css.ap.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated