Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
www.twsupport.css.ap.sony.comNo domain scope published2026-11-14
www.css.ap.sony.comNo domain scope published2026-11-14
erpm-dr.ap.sony.comNo domain scope published2026-11-14
hgpcnise01.ap.sony.comNo domain scope published2026-11-14
hgpcnise02.ap.sony.comNo domain scope published2026-11-14
ice.ap.sony.comNo domain scope published2026-11-14
ipela-partners.ap.sony.comNo domain scope published2026-11-14
ls15.ap.sony.comNo domain scope published2026-11-14
autodiscover.ls15.ap.sony.commailNo domain scope published2026-11-14
dialin.ls15.ap.sony.comNo domain scope published2026-11-14
ls15se01.ls15.ap.sony.comNo domain scope published2026-11-14
lync2013ap.ls15.ap.sony.comNo domain scope published2026-11-14
lync2013dp.ls15.ap.sony.comNo domain scope published2026-11-14
lync2013pooldrwebservices.ls15.ap.sony.comNo domain scope published2026-11-14
lync2013poolwebservices.ls15.ap.sony.comNo domain scope published2026-11-14
lyncdiscover.ls15.ap.sony.comNo domain scope published2026-11-14
mail.ls15.ap.sony.commailNo domain scope published2026-11-14
meet.ls15.ap.sony.comNo domain scope published2026-11-14
office2013webapps.ls15.ap.sony.comNo domain scope published2026-11-14
sip.ls15.ap.sony.comNo domain scope published2026-11-14
lyncdiscover.ap.sony.comNo domain scope published2026-11-14
lyncdiscoverinternal.ap.sony.comNo domain scope published2026-11-14
access.lyncpoc.ap.sony.comvpnNo domain scope published2026-11-14
sip.lyncpoc.ap.sony.comNo domain scope published2026-11-14
webconf.lyncpoc.ap.sony.comNo domain scope published2026-11-14
meet.ap.sony.comNo domain scope published2026-11-14
ns1.ap.sony.comNo domain scope published2026-11-14
ns2.ap.sony.comNo domain scope published2026-11-14
ns3.ap.sony.comNo domain scope published2026-11-14
oriss.ap.sony.comNo domain scope published2026-11-14
www.oriss.ap.sony.comNo domain scope published2026-11-14
sgapocs01.ap.sony.comNo domain scope published2026-11-14
sgapocs02.ap.sony.comNo domain scope published2026-11-14
sgapocs03.ap.sony.comNo domain scope published2026-11-14
sghubfpvpn01.ap.sony.comNo domain scope published2026-11-14
sghubfpvpn02.ap.sony.comNo domain scope published2026-11-14
sgsesrdsdb01.ap.sony.comNo domain scope published2026-11-14
www.sgsesrdsdb01.ap.sony.comNo domain scope published2026-11-14
sidcsa.ap.sony.comNo domain scope published2026-11-14
sidess.ap.sony.comNo domain scope published2026-11-14
sidintportal.ap.sony.comNo domain scope published2026-11-14
sip.ap.sony.comNo domain scope published2026-11-14
sipfed.ap.sony.comNo domain scope published2026-11-14
smap.ap.sony.comNo domain scope published2026-11-14
www.smap.ap.sony.comNo domain scope published2026-11-14
sxsg1bcee02.ap.sony.comNo domain scope published2026-11-14
sxsg1bcee03.ap.sony.comNo domain scope published2026-11-14
www.ap.sony.comNo domain scope published2026-11-14
rebate.api.sony.comapiNo domain scope published2026-11-14
archer-dev.sony.comdevNo domain scope published2026-11-14
autodiscover.sony.commailNo domain scope published2026-11-14
aws-preview-production-pdp.sony.comstagingNo domain scope published2026-11-14
b2b.sony.comNo domain scope published2026-11-14
b2b-tdn.sony.comNo domain scope published2026-11-14
b2bprev.sony.comNo domain scope published2026-11-14
b2bqa.sony.comNo domain scope published2026-11-14
b2bqa-tdn.sony.comNo domain scope published2026-11-14
b2bstg.sony.comNo domain scope published2026-11-14
b2bstg-tdn.sony.comNo domain scope published2026-11-14
beamsquare.sony.comNo domain scope published2026-11-14
www.beamsquare.sony.comNo domain scope published2026-11-14
beta.sony.comstagingNo domain scope published2026-11-14
betar.sony.comNo domain scope published2026-11-14
blog.sony.comNo domain scope published2026-11-14
ces.blog.sony.comNo domain scope published2026-11-14
dev.blog.sony.comdevNo domain scope published2026-11-14
qa.blog.sony.comtestNo domain scope published2026-11-14
bookstore.sony.comNo domain scope published2026-11-14
bpla.sony.comNo domain scope published2026-11-14
www.bpla.sony.comNo domain scope published2026-11-14
bt.sony.comNo domain scope published2026-11-14
isdc-ny-pdk.ca.sony.comNo domain scope published2026-11-14
sid-sso.ca01.sony.comauthNo domain scope published2026-11-14
careers.sony.comNo domain scope published2026-11-14
rebate.consumer.channel.sony.comNo domain scope published2026-11-14
rebate.pro.channel.sony.comNo domain scope published2026-11-14
chatsupport.sony.comNo domain scope published2026-11-14
ci.sony.comciNo domain scope published2026-11-14
cine-vnet.sony.comNo domain scope published2026-11-14
cw-pompano.cine-vnet.sony.comNo domain scope published2026-11-14
citrixportal.sony.comNo domain scope published2026-11-14
cnm.sony.comNo domain scope published2026-11-14
cnmqa.sony.comNo domain scope published2026-11-14
cnmstg.sony.comNo domain scope published2026-11-14
commission.sony.comNo domain scope published2026-11-14
community.sony.comNo domain scope published2026-11-14
ap.community.sony.comNo domain scope published2026-11-14
ca.community.sony.comNo domain scope published2026-11-14
la.community.sony.comNo domain scope published2026-11-14
us.community.sony.comNo domain scope published2026-11-14
www.community.sony.comNo domain scope published2026-11-14
computing.sony.comNo domain scope published2026-11-14
concierge.sony.comNo domain scope published2026-11-14
cppd.sony.comNo domain scope published2026-11-14
hub.cs.sony.comNo domain scope published2026-11-14
q.cs.sony.comNo domain scope published2026-11-14
q-gcsd.cs.sony.comNo domain scope published2026-11-14
smartcheck.cs.sony.comNo domain scope published2026-11-14
cs3.sony.comNo domain scope published2026-11-14
cs3-staging.sony.comstagingNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated