Skip to content
Connect AISign inSign up free

Bug bounty program

SO

Sony

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
1
Disclosed reports
14
Subdomains
13,535
Vendor on CyberSIXT
Sony (79 CVEs, 0 exploited)

Most upvoted reports14

All reports
Most upvoted reports of Sony
ReportWeaknessDisclosedBountyVotes
DLL side-loading vulnerability in Sony Music Center for PC Ver. 2.7.2 (Latest version)Analysed#3355766File and Path Handling2026-06-05–109
SQL Injection at https://████ via ███ parameterAnalysed#1935151SQL Injection2023-04-24–74
明確な認証不備および潜在的な中間者攻撃の可能性（Clear Authentication Deficiencies & Potential for Man-in-the-Middle Attacks）Analysed#2642615Cryptography2025-07-08–71
Improper State Validation on Sony WH-CH520 via BLE Command Service leads to unauthorized Bluetooth pairing and audio hijacking#3514490No weakness recorded––67
SQL injection at ███████Analysed#2256032SQL Injection2024-01-24–63
SSRF on http://www.███████/crossdomain.php via url parameterAnalysed#971590Server-Side Request Forgery2022-10-06–42
Remote Code Execution (RCE) in a Sony WebSystemAnalysed#329572Deserialization and Object Injection2019-01-23–40
Path Traversal issue at https://████/blaze/Analysed#1320084File and Path Handling2022-10-06–40
LFI at http://www.████Analysed#986380Command and Code Injection2022-12-16–37
Blind User-Agent SQL Injection to Blind Remote OS Command Execution at █████████Analysed#1339430Command and Code Injection2022-07-06–26

Subdomains13,535

Root
Scope
Name suggests:Tools
First seen
Text fileClear filters137 names
Subdomains of Sony
NameScopeFirst seen
code-confluence-dev.am.sony.comdev, toolsNo domain scope published2026-11-14
code-confluence-staging.am.sony.comstaging, toolsNo domain scope published2026-11-14
code-jira.am.sony.comtoolsNo domain scope published2026-11-14
code-jira-dev.am.sony.comdev, toolsNo domain scope published2026-11-14
code-jira-staging.am.sony.comstaging, toolsNo domain scope published2026-11-14
confluence.am.sony.comtoolsNo domain scope published2026-11-14
jira-svpa.am.sony.comtoolsNo domain scope published2026-11-14
nexus-code.am.sony.comtoolsNo domain scope published2026-11-14
synthetic-vault-dev.dxservice.sony.comdev, toolsNo domain scope published2026-11-14
portainer.eng.eu.sony.comtoolsNo domain scope published2026-11-14
registry.eng.eu.sony.comtoolsNo domain scope published2026-11-14
registry.infra.eu.sony.comtoolsNo domain scope published2026-11-14
rd-sonarqube.eu.sony.comtoolsNo domain scope published2026-11-14
rd-sonarqube.rds.eu.sony.comtoolsNo domain scope published2026-11-14
wiki.stc.eu.sony.comtoolsNo domain scope published2026-11-14
www.wiki.stc.eu.sony.comtoolsNo domain scope published2026-11-14
confluence.techsoft.eu.sony.comtoolsNo domain scope published2026-11-14
jira.techsoft.eu.sony.comtoolsNo domain scope published2026-11-14
gcs-kiro-registry.gis.sony.comtoolsNo domain scope published2026-11-14
gcs-registry-kiro.gis.sony.comtoolsNo domain scope published2026-11-14
registry.lx.sony.comtoolsNo domain scope published2026-11-14
jira.me.sony.comtoolsNo domain scope published2026-11-14
nexus.me.sony.comtoolsNo domain scope published2026-11-14
jira-dev.sec.sony.comdev, toolsNo domain scope published2026-11-14
www.jira-dev.sec.sony.comdev, toolsNo domain scope published2026-11-14
artifactory.sie.sony.comtoolsNo domain scope published2026-11-14
test.artifactory.sie.sony.comtest, toolsNo domain scope published2026-11-14
wildcard.test.artifactory.sie.sony.comtest, toolsNo domain scope published2026-11-14
wildcard.artifactory.sie.sony.comtoolsNo domain scope published2026-11-14
artifactory.aws.sie.sony.comtoolsNo domain scope published2026-11-14
confluence-dev.aws.sie.sony.comdev, toolsNo domain scope published2026-11-14
confluence-qa.aws.sie.sony.comtest, toolsNo domain scope published2026-11-14
confluence-stg.aws.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira-dev.aws.sie.sony.comdev, toolsNo domain scope published2026-11-14
jira-dev-node-1.aws.sie.sony.comdev, toolsNo domain scope published2026-11-14
jira-dev-node-2.aws.sie.sony.comdev, toolsNo domain scope published2026-11-14
jira-prd-node-1.aws.sie.sony.comtoolsNo domain scope published2026-11-14
jira-prd-node-2.aws.sie.sony.comtoolsNo domain scope published2026-11-14
jira-prd-node-3.aws.sie.sony.comtoolsNo domain scope published2026-11-14
jira-prd-node-4.aws.sie.sony.comtoolsNo domain scope published2026-11-14
jira-qa-node-1.aws.sie.sony.comtest, toolsNo domain scope published2026-11-14
jira-qa-node-2.aws.sie.sony.comtest, toolsNo domain scope published2026-11-14
jira-qa-node-3.aws.sie.sony.comtest, toolsNo domain scope published2026-11-14
jira-qa-node-4.aws.sie.sony.comtest, toolsNo domain scope published2026-11-14
jira-stg-node-1.aws.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira-stg-node-2.aws.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira-stg-node-3.aws.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira-stg-node-4.aws.sie.sony.comstaging, toolsNo domain scope published2026-11-14
confluence.sie.sony.comtoolsNo domain scope published2026-11-14
confluence.dev.sie.sony.comdev, toolsNo domain scope published2026-11-14
jira.dev.sie.sony.comdev, toolsNo domain scope published2026-11-14
rancher.dlrs.sie.sony.comtoolsNo domain scope published2026-11-14
docker.sie.sony.comtoolsNo domain scope published2026-11-14
aws-wiki01.infra.sie.sony.comtoolsNo domain scope published2026-11-14
docker.infra.sie.sony.comtoolsNo domain scope published2026-11-14
docker-nonprod.infra.sie.sony.comtoolsNo domain scope published2026-11-14
nexus.infra.sie.sony.comtoolsNo domain scope published2026-11-14
nexus-nonprod.infra.sie.sony.comtoolsNo domain scope published2026-11-14
siee-docker.infra.sie.sony.comtoolsNo domain scope published2026-11-14
siee-docker-nonprod.infra.sie.sony.comtoolsNo domain scope published2026-11-14
tyoa-rancher-mgmt01.infra.sie.sony.comtoolsNo domain scope published2026-11-14
tyoa-rancher01.infra.sie.sony.comtoolsNo domain scope published2026-11-14
tyoa-rancher02.infra.sie.sony.comtoolsNo domain scope published2026-11-14
tyoa-rancher03.infra.sie.sony.comtoolsNo domain scope published2026-11-14
vault-nonprod.infra.sie.sony.comtoolsNo domain scope published2026-11-14
vault-prod.infra.sie.sony.comtoolsNo domain scope published2026-11-14
wiki.infra.sie.sony.comtoolsNo domain scope published2026-11-14
mcp-confluence.it-apps.sie.sony.comtoolsNo domain scope published2026-11-14
mcp-jira.it-apps.sie.sony.comtoolsNo domain scope published2026-11-14
jira.sie.sony.comtoolsNo domain scope published2026-11-14
jira.jps.sie.sony.comtoolsNo domain scope published2026-11-14
nexus.sie.sony.comtoolsNo domain scope published2026-11-14
pda-k8s-d1.nonprod.pde.sie.sony.comtoolsNo domain scope published2026-11-14
pda-k8s-d1.nonprod01.pde.sie.sony.comtoolsNo domain scope published2026-11-14
confluence.qa.sie.sony.comtest, toolsNo domain scope published2026-11-14
jira.qa.sie.sony.comtest, toolsNo domain scope published2026-11-14
rancher.sie.sony.comtoolsNo domain scope published2026-11-14
rancher-aws.sie.sony.comtoolsNo domain scope published2026-11-14
rancher-test.sie.sony.comtest, toolsNo domain scope published2026-11-14
v.rancher-test.sie.sony.comtest, toolsNo domain scope published2026-11-14
rd-ci-docker-registry.sie.sony.comci, toolsNo domain scope published2026-11-14
shield-rancher.sie.sony.comtoolsNo domain scope published2026-11-14
bis-jenkins-harbor.ss.sie.sony.comci, toolsNo domain scope published2026-11-14
bis-jenkins-rancher.ss.sie.sony.comci, toolsNo domain scope published2026-11-14
container-registry.infra.ss.sie.sony.comtoolsNo domain scope published2026-11-14
docker.github.nextgen-test.ss.sie.sony.comgit, test, toolsNo domain scope published2026-11-14
rancher.nextgen-test.ss.sie.sony.comtest, toolsNo domain scope published2026-11-14
rancher-dev.windmill-pri.ss.sie.sony.comdev, toolsNo domain scope published2026-11-14
rancher-dev-airgap.windmill-pri.ss.sie.sony.comdev, toolsNo domain scope published2026-11-14
rancher-prod.windmill-pri.ss.sie.sony.comtoolsNo domain scope published2026-11-14
rancher-sand.windmill-pri.ss.sie.sony.comtoolsNo domain scope published2026-11-14
rancher-stg.windmill-pri.ss.sie.sony.comstaging, toolsNo domain scope published2026-11-14
confluence.stg.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira.stg.sie.sony.comstaging, toolsNo domain scope published2026-11-14
jira.test.sie.sony.comtest, toolsNo domain scope published2026-11-14
confluence.snei.sony.comtoolsNo domain scope published2026-11-14
confluence.dev.snei.sony.comdev, toolsNo domain scope published2026-11-14
jira.dev.snei.sony.comdev, toolsNo domain scope published2026-11-14
docker-registry.snei.sony.comtoolsNo domain scope published2026-11-14
jira.snei.sony.comtoolsNo domain scope published2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated