Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
prdappecs02.am.sony.comNo domain scope published2026-11-14
prdappecscom01.am.sony.comNo domain scope published2026-11-14
prdappokta01.am.sony.comNo domain scope published2026-11-14
prdappokta02.am.sony.comNo domain scope published2026-11-14
prdappokta03.am.sony.comNo domain scope published2026-11-14
prdappredmine01.am.sony.comNo domain scope published2026-11-14
prdappxen18.am.sony.comNo domain scope published2026-11-14
prdappxen19.am.sony.comNo domain scope published2026-11-14
prdappxen20.am.sony.comNo domain scope published2026-11-14
prdappxen21.am.sony.comNo domain scope published2026-11-14
prdappxen22.am.sony.comNo domain scope published2026-11-14
prdappxen23.am.sony.comNo domain scope published2026-11-14
prdappxen24.am.sony.comNo domain scope published2026-11-14
prdappyaml01.am.sony.comNo domain scope published2026-11-14
prdlglzorro02.am.sony.comNo domain scope published2026-11-14
prdmgmtepo01.am.sony.comNo domain scope published2026-11-14
prdmgtisea03.am.sony.comNo domain scope published2026-11-14
prdmgtisea05.am.sony.comNo domain scope published2026-11-14
prdmgtisea06.am.sony.comNo domain scope published2026-11-14
prdmgtmfe02.am.sony.comNo domain scope published2026-11-14
prdmgtss.am.sony.comNo domain scope published2026-11-14
prdmgtss02.am.sony.comNo domain scope published2026-11-14
prdmgtss101.am.sony.comNo domain scope published2026-11-14
prdmgttanium01.am.sony.comNo domain scope published2026-11-14
prdmgttanium02.am.sony.comNo domain scope published2026-11-14
prdslrwndspol01.am.sony.comNo domain scope published2026-11-14
www.prdslrwndspol01.am.sony.comNo domain scope published2026-11-14
prdvroyalnt07.am.sony.comNo domain scope published2026-11-14
prdxenapp03.am.sony.comNo domain scope published2026-11-14
prdxenapp04.am.sony.comNo domain scope published2026-11-14
prdxenapp05.am.sony.comNo domain scope published2026-11-14
prdxenapp10.am.sony.comNo domain scope published2026-11-14
prdxenapp11.am.sony.comNo domain scope published2026-11-14
prdxenapp12.am.sony.comNo domain scope published2026-11-14
prdxenapp16.am.sony.comNo domain scope published2026-11-14
prdxenapp17.am.sony.comNo domain scope published2026-11-14
prdxenstf01.am.sony.comNo domain scope published2026-11-14
prdxenstf02.am.sony.comNo domain scope published2026-11-14
prdxenstf03.am.sony.comNo domain scope published2026-11-14
prpap00.am.sony.comNo domain scope published2026-11-14
prpap01.am.sony.comNo domain scope published2026-11-14
prpap02.am.sony.comNo domain scope published2026-11-14
prpap03.am.sony.comNo domain scope published2026-11-14
prpap04.am.sony.comNo domain scope published2026-11-14
prpap05.am.sony.comNo domain scope published2026-11-14
prpap06.am.sony.comNo domain scope published2026-11-14
prpap07.am.sony.comNo domain scope published2026-11-14
prpap08.am.sony.comNo domain scope published2026-11-14
prpap09.am.sony.comNo domain scope published2026-11-14
prpap10.am.sony.comNo domain scope published2026-11-14
prpap11.am.sony.comNo domain scope published2026-11-14
prwweb.am.sony.comNo domain scope published2026-11-14
ps.am.sony.comNo domain scope published2026-11-14
conference-2-siea.ps.am.sony.comNo domain scope published2026-11-14
conference-2-standalonecluster9b124.ps.am.sony.comNo domain scope published2026-11-14
conference-3-siea.ps.am.sony.comNo domain scope published2026-11-14
conference-3-standalonecluster9b124.ps.am.sony.comNo domain scope published2026-11-14
devdemantra.ps.am.sony.comNo domain scope published2026-11-14
grcdev.ps.am.sony.comNo domain scope published2026-11-14
hyperiondev.ps.am.sony.comNo domain scope published2026-11-14
hyperiondev2.ps.am.sony.comNo domain scope published2026-11-14
hyperionprod.ps.am.sony.comNo domain scope published2026-11-14
hyperionprod2.ps.am.sony.comNo domain scope published2026-11-14
hyperiontest.ps.am.sony.comNo domain scope published2026-11-14
hyperiontest2.ps.am.sony.comNo domain scope published2026-11-14
prdappgsa01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazcer02.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazcmsub05.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazcmsub06.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazexpc01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazimp01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtaztftp01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtazucxn02.ps.am.sony.comNo domain scope published2026-11-14
prdmgtbpcmsub02.ps.am.sony.comNo domain scope published2026-11-14
prdmgtbpuccx01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtbpuccx01-ms.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcer01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcer01-ms.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcmpub01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcmpub01-ms.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcmsub03.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvcmsub04.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvimp02.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvtftp01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvuccx02.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvucxn01.ps.am.sony.comNo domain scope published2026-11-14
prdmgtsvucxn01-ms.ps.am.sony.comNo domain scope published2026-11-14
rdmgtsvcmpub01.ps.am.sony.comNo domain scope published2026-11-14
srmpre.ps.am.sony.comNo domain scope published2026-11-14
srmqa.ps.am.sony.comNo domain scope published2026-11-14
ucsjcacuc01.ps.am.sony.comNo domain scope published2026-11-14
ucsjcacuc01-ms.ps.am.sony.comNo domain scope published2026-11-14
ucsjcacuc02.ps.am.sony.comNo domain scope published2026-11-14
ucsjcaexpc01.ps.am.sony.comNo domain scope published2026-11-14
ucsjcapub01.ps.am.sony.comNo domain scope published2026-11-14
ucsjcapub01-ms.ps.am.sony.comNo domain scope published2026-11-14
ucsjcasub01.ps.am.sony.comNo domain scope published2026-11-14
ucsjcasub02.ps.am.sony.comNo domain scope published2026-11-14
ucsjcasub03.ps.am.sony.comNo domain scope published2026-11-14
ucsjcatftp01.ps.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated