Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests
First seen
Text file13,535 names
Subdomains of Sony
NameScopeFirst seen
us-e1-cogdev5.am.sony.comNo domain scope published2026-11-14
us-e1-cogprd1.am.sony.comNo domain scope published2026-11-14
us-e1-cogprd3.am.sony.comNo domain scope published2026-11-14
us-e1-cogprd5.am.sony.comNo domain scope published2026-11-14
us-e1-cogprd6.am.sony.comNo domain scope published2026-11-14
us-e1-parisdev3.am.sony.comNo domain scope published2026-11-14
us-e1-parisdev5.am.sony.comNo domain scope published2026-11-14
us-e1-parisdev6.am.sony.comNo domain scope published2026-11-14
us-e1-parisdev7.am.sony.comNo domain scope published2026-11-14
us-e1-parisdv11.am.sony.comNo domain scope published2026-11-14
us-e1-parisdv12.am.sony.comNo domain scope published2026-11-14
us-e1-parisdv13.am.sony.comNo domain scope published2026-11-14
us-e1-parispd11.am.sony.comNo domain scope published2026-11-14
us-e1-parispd12.am.sony.comNo domain scope published2026-11-14
us-e1-parispd13.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd4.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd5.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd6.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd7.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd8.am.sony.comNo domain scope published2026-11-14
us-e1-parisprd9.am.sony.comNo domain scope published2026-11-14
us001a805aa8b6.am.sony.comNo domain scope published2026-11-14
us001a805c8b8b.am.sony.comNo domain scope published2026-11-14
us48ba4e8ae9c8.am.sony.comNo domain scope published2026-11-14
us8c16451956ba.am.sony.comNo domain scope published2026-11-14
usa4badbd75a3f.am.sony.comNo domain scope published2026-11-14
usashghcadmpv.am.sony.comNo domain scope published2026-11-14
usashghcarc3psr01.am.sony.comNo domain scope published2026-11-14
usashghcarc3pwbdev01.am.sony.comNo domain scope published2026-11-14
usashghcarc3pwbstg01.am.sony.comNo domain scope published2026-11-14
usashghcarclabv.am.sony.comNo domain scope published2026-11-14
usashghcarcwbstg01v.am.sony.comNo domain scope published2026-11-14
usashghcarcwbstg02v.am.sony.comNo domain scope published2026-11-14
usashghcarcwf01.am.sony.comNo domain scope published2026-11-14
usashghcarcwf02.am.sony.comNo domain scope published2026-11-14
usashghcconfgcd01v.am.sony.comNo domain scope published2026-11-14
usashghcconfgcq01v.am.sony.comNo domain scope published2026-11-14
usashghcduopxy01v.am.sony.comNo domain scope published2026-11-14
usashghcfeax01.am.sony.comNo domain scope published2026-11-14
usashghcfecms01.am.sony.comNo domain scope published2026-11-14
usashghcgitlabdev01v.am.sony.comNo domain scope published2026-11-14
usashghcgitprod01v.am.sony.comNo domain scope published2026-11-14
usashghcidsmgmt01.am.sony.comNo domain scope published2026-11-14
usashghcjiraddb01v.am.sony.comNo domain scope published2026-11-14
usashghcjirapdb01v.am.sony.comNo domain scope published2026-11-14
usashghcjiraqdb01v.am.sony.comNo domain scope published2026-11-14
usashghcpapan02.am.sony.comNo domain scope published2026-11-14
usashghcslrw01v.am.sony.comNo domain scope published2026-11-14
usashghcvault01v.am.sony.comNo domain scope published2026-11-14
usashghcvctr01v.am.sony.comNo domain scope published2026-11-14
usashghcvm01v.am.sony.comNo domain scope published2026-11-14
usashghcvm01vtmp.am.sony.comNo domain scope published2026-11-14
usashghcvrop01v.am.sony.comNo domain scope published2026-11-14
usashghcwanrt01.am.sony.comNo domain scope published2026-11-14
usashghcwanrt02.am.sony.comNo domain scope published2026-11-14
usashghcxq01d.am.sony.comNo domain scope published2026-11-14
usashlieweb01v.am.sony.comNo domain scope published2026-11-14
usashlieweb02v.am.sony.comNo domain scope published2026-11-14
usashscahx01.am.sony.comNo domain scope published2026-11-14
usashscahxd01.am.sony.comNo domain scope published2026-11-14
usashselhx01.am.sony.comNo domain scope published2026-11-14
usashselhxd01.am.sony.comNo domain scope published2026-11-14
usashsiehx01.am.sony.comNo domain scope published2026-11-14
usashsiehxd01.am.sony.comNo domain scope published2026-11-14
usashsmehx01.am.sony.comNo domain scope published2026-11-14
usashsmehxd01.am.sony.comNo domain scope published2026-11-14
usashsqllie01v.am.sony.comNo domain scope published2026-11-14
usashsqllie02v.am.sony.comNo domain scope published2026-11-14
usculaeshx.am.sony.comNo domain scope published2026-11-14
usculamaginp07v.am.sony.comNo domain scope published2026-11-14
usculamaginp08v.am.sony.comNo domain scope published2026-11-14
usculansiblesnd01v.am.sony.comNo domain scope published2026-11-14
uscularcapd25v.am.sony.comNo domain scope published2026-11-14
uscularcapp24dv.am.sony.comNo domain scope published2026-11-14
uscularchwbp02v.am.sony.comNo domain scope published2026-11-14
uscularcsqld01v.am.sony.comNo domain scope published2026-11-14
uscularcweb02v.am.sony.comNo domain scope published2026-11-14
uscularcweb03v.am.sony.comNo domain scope published2026-11-14
uscularcweb11qv.am.sony.comNo domain scope published2026-11-14
uscularcweb21dv.am.sony.comNo domain scope published2026-11-14
usculaseginp01.am.sony.comNo domain scope published2026-11-14
usculaseginp02.am.sony.comNo domain scope published2026-11-14
usculaseginp03v.am.sony.comNo domain scope published2026-11-14
usculaseginp04v.am.sony.comNo domain scope published2026-11-14
usculasegint01v.am.sony.comNo domain scope published2026-11-14
usculata01.am.sony.comNo domain scope published2026-11-14
usculboeapd01v.am.sony.comNo domain scope published2026-11-14
usculcaasql01.am.sony.comNo domain scope published2026-11-14
usculciseapp01v.am.sony.comNo domain scope published2026-11-14
usculciseapp02v.am.sony.comNo domain scope published2026-11-14
usculctxsme08v.am.sony.comNo domain scope published2026-11-14
usculdajlmo01v.am.sony.comNo domain scope published2026-11-14
usculdajlmo02v.am.sony.comNo domain scope published2026-11-14
usculduoldappxy01.am.sony.comNo domain scope published2026-11-14
usculecpde01testv.am.sony.comNo domain scope published2026-11-14
usculepicapp01v.am.sony.comNo domain scope published2026-11-14
usculepomast01.am.sony.comNo domain scope published2026-11-14
usculfehxsg02.am.sony.comNo domain scope published2026-11-14
usculfehxss01.am.sony.comNo domain scope published2026-11-14
usculfemgt01.am.sony.comNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated