Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
ucsmcasub04.ps.am.sony.comNo domain scope published2026-11-14
ucsmcatftp02.ps.am.sony.comNo domain scope published2026-11-14
pscitrix.am.sony.comNo domain scope published2026-11-14
psrap00.am.sony.comNo domain scope published2026-11-14
pssr-jenkins.am.sony.comciNo domain scope published2026-11-14
pulse-pps.am.sony.comNo domain scope published2026-11-14
qas-poc.am.sony.comNo domain scope published2026-11-14
qepap00.am.sony.comNo domain scope published2026-11-14
qrpap00.am.sony.comNo domain scope published2026-11-14
qrpap01.am.sony.comNo domain scope published2026-11-14
qrpap02.am.sony.comNo domain scope published2026-11-14
qrpap03.am.sony.comNo domain scope published2026-11-14
qrwweb.am.sony.comNo domain scope published2026-11-14
qsrap00.am.sony.comNo domain scope published2026-11-14
questpm-b2c.am.sony.comNo domain scope published2026-11-14
redmine.am.sony.comNo domain scope published2026-11-14
remedy.am.sony.comNo domain scope published2026-11-14
repository.am.sony.comNo domain scope published2026-11-14
scasecurityportal.am.sony.comNo domain scope published2026-11-14
scasp.am.sony.comNo domain scope published2026-11-14
test.scasp.am.sony.comtestNo domain scope published2026-11-14
sctm.am.sony.comNo domain scope published2026-11-14
sd-jamfss-01.am.sony.comNo domain scope published2026-11-14
sd-mlbpresrecap.am.sony.comNo domain scope published2026-11-14
sd-vasgsnipe-01.am.sony.comNo domain scope published2026-11-14
sd1-fwx-c01.am.sony.comNo domain scope published2026-11-14
sftp-ss.am.sony.comdataNo domain scope published2026-11-14
sggdcdd1em01.am.sony.comNo domain scope published2026-11-14
sggdceaeshx01.am.sony.comNo domain scope published2026-11-14
sgsespfehx01.am.sony.comNo domain scope published2026-11-14
sgsespfehx02.am.sony.comNo domain scope published2026-11-14
siecitrix.am.sony.comNo domain scope published2026-11-14
sip.am.sony.comNo domain scope published2026-11-14
sirt-lab01.am.sony.comNo domain scope published2026-11-14
sisense.am.sony.comNo domain scope published2026-11-14
qa.sisense.am.sony.comtestNo domain scope published2026-11-14
sjca-coh-c01.am.sony.comNo domain scope published2026-11-14
sjca-polyrpm-n01.am.sony.comNo domain scope published2026-11-14
sjca-sg-adm01.am.sony.comadminNo domain scope published2026-11-14
sjca-sg-gw.am.sony.comNo domain scope published2026-11-14
sjca-sg-gw-two.am.sony.comNo domain scope published2026-11-14
sjca-str-c01.am.sony.comNo domain scope published2026-11-14
sm-dcrosby-w10.am.sony.comNo domain scope published2026-11-14
sm-recap.am.sony.comNo domain scope published2026-11-14
sme-splunk.am.sony.commonitoringNo domain scope published2026-11-14
smefdm11prod.am.sony.comNo domain scope published2026-11-14
snei.am.sony.comNo domain scope published2026-11-14
snei-it-systems.am.sony.comNo domain scope published2026-11-14
my.snei.am.sony.comNo domain scope published2026-11-14
spappd50.am.sony.comNo domain scope published2026-11-14
spappp.am.sony.comNo domain scope published2026-11-14
spappq.am.sony.comNo domain scope published2026-11-14
sparkulinux.am.sony.comNo domain scope published2026-11-14
spe-ext.am.sony.comNo domain scope published2026-11-14
spe-splunk.am.sony.commonitoringNo domain scope published2026-11-14
spf.am.sony.comNo domain scope published2026-11-14
sphemft.am.sony.comNo domain scope published2026-11-14
sps.am.sony.comNo domain scope published2026-11-14
sps13.am.sony.comNo domain scope published2026-11-14
sps13-qa.am.sony.comtestNo domain scope published2026-11-14
sps13stub-qa.am.sony.comtestNo domain scope published2026-11-14
sptax.am.sony.comNo domain scope published2026-11-14
sptaxdev.am.sony.comNo domain scope published2026-11-14
sqash.am.sony.comNo domain scope published2026-11-14
sqashdev.am.sony.comNo domain scope published2026-11-14
sra.am.sony.comNo domain scope published2026-11-14
srelivetraining.am.sony.comNo domain scope published2026-11-14
stgappxen01.am.sony.comNo domain scope published2026-11-14
stgddcxen01.am.sony.comNo domain scope published2026-11-14
stgstfxen01.am.sony.comNo domain scope published2026-11-14
sumo.am.sony.comNo domain scope published2026-11-14
support.am.sony.comNo domain scope published2026-11-14
swlundsmegx01.am.sony.comNo domain scope published2026-11-14
swlundsmehx01.am.sony.comNo domain scope published2026-11-14
swlundsomchx01.am.sony.comNo domain scope published2026-11-14
sxamiseadmin01.am.sony.comNo domain scope published2026-11-14
sxamiseadmin02.am.sony.comNo domain scope published2026-11-14
syncserv.am.sony.comNo domain scope published2026-11-14
tanium.am.sony.comNo domain scope published2026-11-14
tempo.am.sony.comNo domain scope published2026-11-14
tempodev.am.sony.comNo domain scope published2026-11-14
tempodr.am.sony.comNo domain scope published2026-11-14
tempostaging.am.sony.comNo domain scope published2026-11-14
tempostagingnew.am.sony.comNo domain scope published2026-11-14
tempouat.am.sony.comNo domain scope published2026-11-14
toolbox01.am.sony.comNo domain scope published2026-11-14
tosca-commander.am.sony.comNo domain scope published2026-11-14
tst-ext.am.sony.comNo domain scope published2026-11-14
tstappcode4201.am.sony.comNo domain scope published2026-11-14
ubesua721.am.sony.comNo domain scope published2026-11-14
ucdbwp01.am.sony.comNo domain scope published2026-11-14
ui-recap.am.sony.comNo domain scope published2026-11-14
ukrhaeshx01.am.sony.comNo domain scope published2026-11-14
ukrhaeshx02.am.sony.comNo domain scope published2026-11-14
ukrhaeshxdmz00.am.sony.comNo domain scope published2026-11-14
ukrhaeshxdmz02.am.sony.comNo domain scope published2026-11-14
ukrhnitesm01.am.sony.comNo domain scope published2026-11-14
us-e1-cogdev2.am.sony.comNo domain scope published2026-11-14
us-e1-cogdev3.am.sony.comNo domain scope published2026-11-14
us-e1-cogdev4.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated