Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests:Sign-in
First seen
Text fileClear filters130 names
Subdomains of Sony
NameScopeFirst seen
auth.id.acm.account.sony.comauthNo domain scope published2026-11-14
signin.id.acm.account.sony.comauthNo domain scope published2026-11-14
auth.cim.account.sony.comauthNo domain scope published2026-11-14
www.auth.cim.account.sony.comauthNo domain scope published2026-11-14
auth.e1.cim.account.sony.comauthNo domain scope published2026-11-14
auth.e2.cim.account.sony.comauthNo domain scope published2026-11-14
auth.g99.cim.account.sony.comauthNo domain scope published2026-11-14
auth.p1.cim.account.sony.comauthNo domain scope published2026-11-14
auth.p2.cim.account.sony.comauthNo domain scope published2026-11-14
auth.d.account.sony.comauthNo domain scope published2026-11-14
auth.p1.d.account.sony.comauthNo domain scope published2026-11-14
auth.p2.d.account.sony.comauthNo domain scope published2026-11-14
auth.d01.account.sony.comauthNo domain scope published2026-11-14
auth.d02.account.sony.comauthNo domain scope published2026-11-14
auth.d03.account.sony.comauthNo domain scope published2026-11-14
auth.d04.account.sony.comauthNo domain scope published2026-11-14
auth.d05.account.sony.comauthNo domain scope published2026-11-14
auth.stg.account.sony.comauth, stagingNo domain scope published2026-11-14
auth-n.stg.account.sony.comauth, stagingNo domain scope published2026-11-14
auth.c01.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.c01.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d01-1.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.d01-1.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d01-2.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.d01-2.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d02.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.d02.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d03.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.d03.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d04.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth-n.d04.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d07.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth.d99.uat.account.sony.comauth, testNo domain scope published2026-11-14
auth2.d99.uat.account.sony.comauth, testNo domain scope published2026-11-14
adfs.sony.comauthNo domain scope published2026-11-14
www.adfs.sony.comauthNo domain scope published2026-11-14
auth.am.sony.comauthNo domain scope published2026-11-14
ise.auth.am.sony.comauthNo domain scope published2026-11-14
iam.am.sony.comauthNo domain scope published2026-11-14
iam-esso.am.sony.comauthNo domain scope published2026-11-14
iam-esso-test.am.sony.comauth, testNo domain scope published2026-11-14
iam-prov.am.sony.comauthNo domain scope published2026-11-14
iam-wsso.am.sony.comauthNo domain scope published2026-11-14
iam-wsso-stg.am.sony.comauth, stagingNo domain scope published2026-11-14
iam-wsso-test.am.sony.comauth, testNo domain scope published2026-11-14
idp.am.sony.comauthNo domain scope published2026-11-14
idp-test.am.sony.comauth, testNo domain scope published2026-11-14
sid-sso.ca01.sony.comauthNo domain scope published2026-11-14
adfs.eu.sony.comauthNo domain scope published2026-11-14
www.adfs.eu.sony.comauthNo domain scope published2026-11-14
mfa.stc.eu.sony.comauthNo domain scope published2026-11-14
www.mfa.stc.eu.sony.comauthNo domain scope published2026-11-14
test-adfs.eu.sony.comauth, testNo domain scope published2026-11-14
www.test-adfs.eu.sony.comauth, testNo domain scope published2026-11-14
chef-login.gis.sony.comauthNo domain scope published2026-11-14
internal.chef-login.gis.sony.comauth, internalNo domain scope published2026-11-14
okta-adapter.test.gis.sony.comauth, testNo domain scope published2026-11-14
okta-admin.test.gis.sony.comadmin, auth, testNo domain scope published2026-11-14
login.sony.comauthNo domain scope published2026-11-14
sso.bach.me.sony.comauthNo domain scope published2026-11-14
oauth.dev.bravia.me.sony.comauth, devNo domain scope published2026-11-14
oauth.integ.bravia.me.sony.comauthNo domain scope published2026-11-14
sso.me.sony.comauthNo domain scope published2026-11-14
iam.sel.sony.comauthNo domain scope published2026-11-14
iam-sso.sel.sony.comauthNo domain scope published2026-11-14
iam-sso-test.sel.sony.comauth, testNo domain scope published2026-11-14
iam-test.sel.sony.comauth, testNo domain scope published2026-11-14
idp.sel.sony.comauthNo domain scope published2026-11-14
idp-test.sel.sony.comauth, testNo domain scope published2026-11-14
sso.sdp.sel.sony.comauthNo domain scope published2026-11-14
sso-test.sel.sony.comauth, testNo domain scope published2026-11-14
auth-gateway.it-apps.sie.sony.comauthNo domain scope published2026-11-14
saml.test.sfo.sie.sony.comauth, testNo domain scope published2026-11-14
saml.uat.sfo.sie.sony.comauth, testNo domain scope published2026-11-14
build-info-keycloak.infra.ss.sie.sony.comauth, ciNo domain scope published2026-11-14
build-info-keycloak-test.infra.ss.sie.sony.comauth, ci, testNo domain scope published2026-11-14
oktadsso.sso.sie.sony.comauthNo domain scope published2026-11-14
oktadsso-env.sso.sie.sony.comauthNo domain scope published2026-11-14
auth.snp.ps.smss.sony.comauthNo domain scope published2026-11-14
login.snp.ps.smss.sony.comauthNo domain scope published2026-11-14
ariba-sso.spe.sony.comauthNo domain scope published2026-11-14
ariba-sso-dev.spe.sony.comauth, devNo domain scope published2026-11-14
ariba-sso-qa.spe.sony.comauth, testNo domain scope published2026-11-14
ariba-sso-stg.spe.sony.comauth, stagingNo domain scope published2026-11-14
cxvdi-ag-okta.spe.sony.comauthNo domain scope published2026-11-14
iam.spe.sony.comauthNo domain scope published2026-11-14
identity.spe.sony.comauthNo domain scope published2026-11-14
identity-dev.spe.sony.comauth, devNo domain scope published2026-11-14
identity-dev2.spe.sony.comauth, devNo domain scope published2026-11-14
identity-edc.spe.sony.comauthNo domain scope published2026-11-14
identity-edcstg.spe.sony.comauthNo domain scope published2026-11-14
identity-qa.spe.sony.comauth, testNo domain scope published2026-11-14
identity-qa2.spe.sony.comauthNo domain scope published2026-11-14
identity-stg.spe.sony.comauth, stagingNo domain scope published2026-11-14
identity82.spe.sony.comauthNo domain scope published2026-11-14
identity82-dev.spe.sony.comauth, devNo domain scope published2026-11-14
identity82-dev2.spe.sony.comauth, devNo domain scope published2026-11-14
identity82-qa.spe.sony.comauth, testNo domain scope published2026-11-14
login.spe.sony.comauthNo domain scope published2026-11-14
login-preview.spe.sony.comauth, stagingNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated