Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests:Mail
First seen
Text fileClear filters113 names
Subdomains of Sony
NameScopeFirst seen
c.mx.email.account.sony.commailNo domain scope published2026-11-14
d.mx.email.account.sony.commailNo domain scope published2026-11-14
as-mail.am.sony.commailNo domain scope published2026-11-14
autodiscover.am.sony.commailNo domain scope published2026-11-14
mail.am.sony.commailNo domain scope published2026-11-14
owa.am.sony.commailNo domain scope published2026-11-14
autodiscover.ls15.ap.sony.commailNo domain scope published2026-11-14
mail.ls15.ap.sony.commailNo domain scope published2026-11-14
autodiscover.sony.commailNo domain scope published2026-11-14
as-mail.am.dmz.sony.commailNo domain scope published2026-11-14
mail1.fw-bc.sony.commailNo domain scope published2026-11-14
mail2.fw-bc.sony.commailNo domain scope published2026-11-14
mail3.fw-bc.sony.commailNo domain scope published2026-11-14
_dmarc.mail3.fw-bc.sony.commailNo domain scope published2026-11-14
_mta-sts.mail3.fw-bc.sony.commailNo domain scope published2026-11-14
mail4.fw-bc.sony.commailNo domain scope published2026-11-14
mail5.fw-bc.sony.commailNo domain scope published2026-11-14
mail6.fw-bc.sony.commailNo domain scope published2026-11-14
mail7.fw-bc.sony.commailNo domain scope published2026-11-14
mail8.fw-bc.sony.commailNo domain scope published2026-11-14
owa.fw-bc.sony.commailNo domain scope published2026-11-14
owa-west.fw-bc.sony.commailNo domain scope published2026-11-14
mail1.fw-sd.sony.commailNo domain scope published2026-11-14
mail2.fw-sd.sony.commailNo domain scope published2026-11-14
mail7.fw-sd.sony.commailNo domain scope published2026-11-14
mail8.fw-sd.sony.commailNo domain scope published2026-11-14
mail2.fw-sj.sony.commailNo domain scope published2026-11-14
mail3.fw-sj.sony.commailNo domain scope published2026-11-14
_dmarc.mail3.fw-sj.sony.commailNo domain scope published2026-11-14
_mta-sts.mail3.fw-sj.sony.commailNo domain scope published2026-11-14
mail4.fw-sj.sony.commailNo domain scope published2026-11-14
_dmarc.mail4.fw-sj.sony.commailNo domain scope published2026-11-14
_mta-sts.mail4.fw-sj.sony.commailNo domain scope published2026-11-14
mail5.fw-sj.sony.commailNo domain scope published2026-11-14
mail6.fw-sj.sony.commailNo domain scope published2026-11-14
mail7.fw-sj.sony.commailNo domain scope published2026-11-14
mail.me.sony.commailNo domain scope published2026-11-14
pbeta-smtp1.playstation.sony.commailNo domain scope published2026-11-14
smtp1-rs.playstation.sony.commailNo domain scope published2026-11-14
smtp1-xtra.playstation.sony.commailNo domain scope published2026-11-14
smtp2-rs.playstation.sony.commailNo domain scope published2026-11-14
smtp2-xtra.playstation.sony.commailNo domain scope published2026-11-14
socom3-smtp1.playstation.sony.commailNo domain scope published2026-11-14
mail.lu.readerstore.sony.commailNo domain scope published2026-11-14
mail01.readerstore.sony.commailNo domain scope published2026-11-14
mail.mail01.readerstore.sony.commailNo domain scope published2026-11-14
mta1.mail01.readerstore.sony.commailNo domain scope published2026-11-14
mta2.mail01.readerstore.sony.commailNo domain scope published2026-11-14
mta3.mail01.readerstore.sony.commailNo domain scope published2026-11-14
mta4.mail01.readerstore.sony.commailNo domain scope published2026-11-14
mail02.readerstore.sony.commailNo domain scope published2026-11-14
mail.mail02.readerstore.sony.commailNo domain scope published2026-11-14
mta1.mail02.readerstore.sony.commailNo domain scope published2026-11-14
mta2.mail02.readerstore.sony.commailNo domain scope published2026-11-14
mta3.mail02.readerstore.sony.commailNo domain scope published2026-11-14
mta4.mail02.readerstore.sony.commailNo domain scope published2026-11-14
tx.mail02.readerstore.sony.commailNo domain scope published2026-11-14
mail.na.readerstore.sony.commailNo domain scope published2026-11-14
mail.response.readerstore.sony.commailNo domain scope published2026-11-14
mail.dealer.sel.sony.commailNo domain scope published2026-11-14
owa-east.sel.sony.commailNo domain scope published2026-11-14
mail.protection-plus.sel.sony.commailNo domain scope published2026-11-14
mail.sel-email.sel.sony.commailNo domain scope published2026-11-14
mail.sony-network.sel.sony.commailNo domain scope published2026-11-14
mail.sie.sony.commailNo domain scope published2026-11-14
mail.smss.sony.commailNo domain scope published2026-11-14
mail.snail.smss.sony.commailNo domain scope published2026-11-14
mail.snei.sony.commailNo domain scope published2026-11-14
autodiscover.spe.sony.commailNo domain scope published2026-11-14
mail.spe.sony.commailNo domain scope published2026-11-14
owa.spe.sony.commailNo domain scope published2026-11-14
eu.owa.spe.sony.commailNo domain scope published2026-11-14
webmail.spe.sony.commailNo domain scope published2026-11-14
mail.02-04.station.sony.commailNo domain scope published2026-11-14
mail.station.sony.commailNo domain scope published2026-11-14
mail-archive.station.sony.comlegacy, mailNo domain scope published2026-11-14
mail-archive2.station.sony.comlegacy, mailNo domain scope published2026-11-14
mail-host01.station.sony.commailNo domain scope published2026-11-14
mail-host02.station.sony.commailNo domain scope published2026-11-14
mail-hub01.station.sony.commailNo domain scope published2026-11-14
mail-hub02.station.sony.commailNo domain scope published2026-11-14
mail-oma01.station.sony.commailNo domain scope published2026-11-14
mail-oma02.station.sony.commailNo domain scope published2026-11-14
mail-oma03.station.sony.commailNo domain scope published2026-11-14
mail-oma04.station.sony.commailNo domain scope published2026-11-14
mail-sd01.station.sony.commailNo domain scope published2026-11-14
mail-sd02.station.sony.commailNo domain scope published2026-11-14
mail-sd03.station.sony.commailNo domain scope published2026-11-14
mail-sd04.station.sony.commailNo domain scope published2026-11-14
mail-sd1.station.sony.commailNo domain scope published2026-11-14
mail-sd2.station.sony.commailNo domain scope published2026-11-14
mail-sd3.station.sony.commailNo domain scope published2026-11-14
mail-sd4.station.sony.commailNo domain scope published2026-11-14
mail-sd5.station.sony.commailNo domain scope published2026-11-14
mail-sd6.station.sony.commailNo domain scope published2026-11-14
mail.store.sony.commailNo domain scope published2026-11-14
click1.mail.store.sony.commailNo domain scope published2026-11-14
mail1.mail.store.sony.commailNo domain scope published2026-11-14
mail11.mail.store.sony.commailNo domain scope published2026-11-14
mail12.mail.store.sony.commailNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated