Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests:Monitoring
First seen
Text fileClear filters122 names
Subdomains of Sony
NameScopeFirst seen
cloud-splunk.am.sony.commonitoringNo domain scope published2026-11-14
egis-splunk.am.sony.commonitoringNo domain scope published2026-11-14
es-splunk.am.sony.commonitoringNo domain scope published2026-11-14
gsirt-monitor.am.sony.commonitoringNo domain scope published2026-11-14
gsirt-splunk.am.sony.commonitoringNo domain scope published2026-11-14
isdc-il-zabbix.am.sony.commonitoringNo domain scope published2026-11-14
nagios.am.sony.commonitoringNo domain scope published2026-11-14
opco-splunk.am.sony.commonitoringNo domain scope published2026-11-14
sme-splunk.am.sony.commonitoringNo domain scope published2026-11-14
spe-splunk.am.sony.commonitoringNo domain scope published2026-11-14
logs.eng.eu.sony.commonitoringNo domain scope published2026-11-14
monitor.eng.eu.sony.commonitoringNo domain scope published2026-11-14
status.eng.eu.sony.commonitoringNo domain scope published2026-11-14
rd-ci-grafana.eu.sony.comci, monitoringNo domain scope published2026-11-14
rd-gpu-system-monitor.eu.sony.commonitoringNo domain scope published2026-11-14
rd-ci-grafana.rds.eu.sony.comci, monitoringNo domain scope published2026-11-14
rd-ci-kibana.rds.eu.sony.comci, monitoringNo domain scope published2026-11-14
logs.lx.sony.commonitoringNo domain scope published2026-11-14
monitor.lx.sony.commonitoringNo domain scope published2026-11-14
status.lx.sony.commonitoringNo domain scope published2026-11-14
metrics.sony.commonitoringNo domain scope published2026-11-14
sonycorp-splunk-legacy.sec.sony.comlegacy, monitoringNo domain scope published2026-11-14
www.sonycorp-splunk-legacy.sec.sony.comlegacy, monitoringNo domain scope published2026-11-14
grafana.np.airt.sie.sony.commonitoringNo domain scope published2026-11-14
prometheus.np.aws.sie.sony.commonitoringNo domain scope published2026-11-14
grafana.bfsi.sie.sony.commonitoringNo domain scope published2026-11-14
status.data.sie.sony.commonitoringNo domain scope published2026-11-14
grafana.dev.ent-ai-middleware.sie.sony.comdev, monitoringNo domain scope published2026-11-14
sentry.dev.entapps.sie.sony.comdev, monitoringNo domain scope published2026-11-14
sentry.entapps.sie.sony.commonitoringNo domain scope published2026-11-14
sentry-dev.entapps.sie.sony.comdev, monitoringNo domain scope published2026-11-14
sentry-qa.entapps.sie.sony.commonitoring, testNo domain scope published2026-11-14
sentry-stage.entapps.sie.sony.commonitoring, stagingNo domain scope published2026-11-14
grafana-actions.sie.sony.commonitoringNo domain scope published2026-11-14
test.grafana-actions.sie.sony.commonitoring, testNo domain scope published2026-11-14
grafana-group-sync.cptprd.aws.infra.sie.sony.commonitoringNo domain scope published2026-11-14
grafana-project-master.cptprd.aws.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx-c02n01.usw2.csprd.aws.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx-c02n02.usw2.csprd.aws.infra.sie.sony.commonitoringNo domain scope published2026-11-14
grafana.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx-c02n01.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx-c02n02.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx01.infra.sie.sony.commonitoringNo domain scope published2026-11-14
splunk-idx02.infra.sie.sony.commonitoringNo domain scope published2026-11-14
zabbix.infra.sie.sony.commonitoringNo domain scope published2026-11-14
zabbix-api.infra.sie.sony.comapi, monitoringNo domain scope published2026-11-14
zabbix-stg.infra.sie.sony.commonitoring, stagingNo domain scope published2026-11-14
grafana.prod.intser.sie.sony.commonitoringNo domain scope published2026-11-14
prometheus.prod.intser.sie.sony.commonitoringNo domain scope published2026-11-14
grafana-influxdb.it-apps.sie.sony.commonitoringNo domain scope published2026-11-14
build-server-monitor.jp.sie.sony.comci, monitoringNo domain scope published2026-11-14
sssdk-svc-logs-01.jp.sie.sony.commonitoringNo domain scope published2026-11-14
sssdk-tyoa-logs-01.jp.sie.sony.commonitoringNo domain scope published2026-11-14
program-metrics.sie.sony.commonitoringNo domain scope published2026-11-14
ldn-zabbix.pss.sie.sony.commonitoringNo domain scope published2026-11-14
rd-gpu-system-monitor.sie.sony.commonitoringNo domain scope published2026-11-14
grafana.dev.srr.sie.sony.comdev, monitoringNo domain scope published2026-11-14
grafana.uat.srr.sie.sony.commonitoring, testNo domain scope published2026-11-14
prometheus.uat.srr.sie.sony.commonitoring, testNo domain scope published2026-11-14
alertmanager.infra.ss.sie.sony.commonitoringNo domain scope published2026-11-14
alertmanager-dev.infra.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
proto-grafana.nextgen-test.ss.sie.sony.commonitoring, testNo domain scope published2026-11-14
proto-prometheus.nextgen-test.ss.sie.sony.commonitoring, testNo domain scope published2026-11-14
proto-prometheus-operator01.nextgen-test.ss.sie.sony.commonitoring, testNo domain scope published2026-11-14
proto-prometheus-operator02.nextgen-test.ss.sie.sony.commonitoring, testNo domain scope published2026-11-14
influxdb-grafana.rocca.ss.sie.sony.commonitoringNo domain scope published2026-11-14
kibana.rocca.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-apm.rocca.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-kibana.rocca.ss.sie.sony.commonitoringNo domain scope published2026-11-14
apm.windmill-dev-airgap.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
influxdb-grafana.windmill-dev-airgap.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
kibana.windmill-dev-airgap.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-apm.windmill-dev-airgap.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-kibana.windmill-dev-airgap.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
influxdb-grafana.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
kibana.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-apm.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-kibana.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-kibana-dev2.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-kibana-dev3.windmill-dev.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
otel-kibana.windmill-dev2.ss.sie.sony.comdev, monitoringNo domain scope published2026-11-14
influxdb-grafana.windmill-sand-airgap.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-apm.windmill-sand-airgap.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-kibana.windmill-sand-airgap.ss.sie.sony.commonitoringNo domain scope published2026-11-14
apm.windmill-sand.ss.sie.sony.commonitoringNo domain scope published2026-11-14
influxdb-grafana.windmill-sand.ss.sie.sony.commonitoringNo domain scope published2026-11-14
kibana.windmill-sand.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-apm.windmill-sand.ss.sie.sony.commonitoringNo domain scope published2026-11-14
otel-kibana.windmill-sand.ss.sie.sony.commonitoringNo domain scope published2026-11-14
influxdb-grafana.windmill-stg.ss.sie.sony.commonitoring, stagingNo domain scope published2026-11-14
otel-apm.windmill-stg.ss.sie.sony.commonitoring, stagingNo domain scope published2026-11-14
otel-kibana.windmill-stg.ss.sie.sony.commonitoring, stagingNo domain scope published2026-11-14
prometheus.tnt.sie.sony.commonitoringNo domain scope published2026-11-14
pushgateway.prometheus.tnt.sie.sony.commonitoringNo domain scope published2026-11-14
zabbix.sie.sony.commonitoringNo domain scope published2026-11-14
kibana.adm.spe.sony.comadmin, monitoringNo domain scope published2026-11-14
kibana-dev.adm.spe.sony.comadmin, dev, monitoringNo domain scope published2026-11-14
kibana-qa.adm.spe.sony.comadmin, monitoring, testNo domain scope published2026-11-14
apm-prod.spe.sony.commonitoringNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated