Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
iam-wsso-test.am.sony.comauth, testNo domain scope published2026-11-14
iamds-cul.am.sony.comNo domain scope published2026-11-14
iamds-sen.am.sony.comNo domain scope published2026-11-14
iampwd.am.sony.comNo domain scope published2026-11-14
idp.am.sony.comauthNo domain scope published2026-11-14
idp-test.am.sony.comauth, testNo domain scope published2026-11-14
inbound-sendmail.am.sony.comNo domain scope published2026-11-14
inside.am.sony.comNo domain scope published2026-11-14
carson.inside.am.sony.comNo domain scope published2026-11-14
carson-test.inside.am.sony.comtestNo domain scope published2026-11-14
intramag.am.sony.comNo domain scope published2026-11-14
citrix.intranet.am.sony.cominternal, vpnNo domain scope published2026-11-14
wfc.intranet.am.sony.cominternalNo domain scope published2026-11-14
isdc-eda.am.sony.comNo domain scope published2026-11-14
isdc-graphs.am.sony.comNo domain scope published2026-11-14
isdc-il-aiq.am.sony.comNo domain scope published2026-11-14
isdc-il-dc02.am.sony.comNo domain scope published2026-11-14
isdc-il-git.am.sony.comgitNo domain scope published2026-11-14
isdc-il-jenkins.am.sony.comciNo domain scope published2026-11-14
isdc-il-redmine.am.sony.comNo domain scope published2026-11-14
isdc-il-sftp.am.sony.comdataNo domain scope published2026-11-14
isdc-il-share.am.sony.comNo domain scope published2026-11-14
isdc-il-sos.am.sony.comNo domain scope published2026-11-14
isdc-il-svn1.am.sony.comgitNo domain scope published2026-11-14
isdc-il-zabbix.am.sony.commonitoringNo domain scope published2026-11-14
isdc-ny-ansible.am.sony.comNo domain scope published2026-11-14
isdc-ny-etx02.am.sony.comNo domain scope published2026-11-14
isdc-ny-github.am.sony.comgitNo domain scope published2026-11-14
isdc-ny-nfs.am.sony.comNo domain scope published2026-11-14
isdc-ny-pdk.am.sony.comNo domain scope published2026-11-14
isdc-pdkmaster.am.sony.comNo domain scope published2026-11-14
isdc-redmine.am.sony.comNo domain scope published2026-11-14
isi-bp.am.sony.comNo domain scope published2026-11-14
isr-pixim-asa.am.sony.comNo domain scope published2026-11-14
jira-svpa.am.sony.comtoolsNo domain scope published2026-11-14
jpjdcaeshx01.am.sony.comNo domain scope published2026-11-14
jpjdcaeshx02.am.sony.comNo domain scope published2026-11-14
jpjdcaeshxdmz01.am.sony.comNo domain scope published2026-11-14
jpjdcaeshxdmz02.am.sony.comNo domain scope published2026-11-14
jptknitesm01.am.sony.comNo domain scope published2026-11-14
krseoscekpdm02.am.sony.comNo domain scope published2026-11-14
krseoscekpdm02d.am.sony.comNo domain scope published2026-11-14
loyalty-sola.am.sony.comNo domain scope published2026-11-14
lsadmin.am.sony.comNo domain scope published2026-11-14
lv.lsct-test.am.sony.comtestNo domain scope published2026-11-14
lv-cppm-ext.am.sony.comNo domain scope published2026-11-14
lv-cppm-int.am.sony.comNo domain scope published2026-11-14
lv-evoko-01.am.sony.comNo domain scope published2026-11-14
lv-lsct.am.sony.comNo domain scope published2026-11-14
lv-lsct-test.am.sony.comtestNo domain scope published2026-11-14
lv-or-lams02.am.sony.comNo domain scope published2026-11-14
lv-smlams12.am.sony.comNo domain scope published2026-11-14
lyncdiscover.am.sony.comNo domain scope published2026-11-14
lyncdiscoverinternal.am.sony.comNo domain scope published2026-11-14
mail.am.sony.commailNo domain scope published2026-11-14
mxsfeadss01.am.sony.comNo domain scope published2026-11-14
mysptax.am.sony.comNo domain scope published2026-11-14
mysptaxdev.am.sony.comNo domain scope published2026-11-14
n2.am.sony.comNo domain scope published2026-11-14
nac-demo-ise-sjca.am.sony.comtestNo domain scope published2026-11-14
nagios.am.sony.commonitoringNo domain scope published2026-11-14
netasthra.am.sony.comNo domain scope published2026-11-14
netlsh01.am.sony.comNo domain scope published2026-11-14
netlsh02.am.sony.comNo domain scope published2026-11-14
netlsh03.am.sony.comNo domain scope published2026-11-14
nexus-code.am.sony.comtoolsNo domain scope published2026-11-14
nimbus.am.sony.comNo domain scope published2026-11-14
nimbus-qa.am.sony.comtestNo domain scope published2026-11-14
office-latin.am.sony.comNo domain scope published2026-11-14
oktadsso.am.sony.comNo domain scope published2026-11-14
oktadsso-env.am.sony.comNo domain scope published2026-11-14
omsappwinprd.am.sony.comNo domain scope published2026-11-14
omsappwinqa.am.sony.comNo domain scope published2026-11-14
opco-splunk.am.sony.commonitoringNo domain scope published2026-11-14
or-build-07.am.sony.comciNo domain scope published2026-11-14
or-chorus-01.am.sony.comNo domain scope published2026-11-14
or-swarmbdl-01.am.sony.comNo domain scope published2026-11-14
or-telemetry-01.am.sony.comNo domain scope published2026-11-14
or-vcenter-01.am.sony.comNo domain scope published2026-11-14
owa.am.sony.commailNo domain scope published2026-11-14
owamail.am.sony.comNo domain scope published2026-11-14
oxide.am.sony.comNo domain scope published2026-11-14
paqman.am.sony.comNo domain scope published2026-11-14
dev.paqman.am.sony.comdevNo domain scope published2026-11-14
paradigm.am.sony.comNo domain scope published2026-11-14
paris.am.sony.comNo domain scope published2026-11-14
paris-dev.am.sony.comdevNo domain scope published2026-11-14
parisweb.am.sony.comNo domain scope published2026-11-14
parisweb-dev.am.sony.comdevNo domain scope published2026-11-14
pepap00.am.sony.comNo domain scope published2026-11-14
pgfx-west-ci1.am.sony.comNo domain scope published2026-11-14
pgpuniversal.am.sony.comNo domain scope published2026-11-14
phishbutton.am.sony.comNo domain scope published2026-11-14
pix-vm-lmgmgr.am.sony.comNo domain scope published2026-11-14
pod.am.sony.comNo domain scope published2026-11-14
prdadars01.am.sony.comNo domain scope published2026-11-14
prdadars01a.am.sony.comNo domain scope published2026-11-14
prdadars03.am.sony.comNo domain scope published2026-11-14
prdadars04.am.sony.comNo domain scope published2026-11-14
prdappcsa01.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated