Bug bounty program
TO
TomTom
Most upvoted reports8
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Exposed Git Repo at http://betaforum.tomtom.com/.git/{subfolders}#541349 | Information Disclosure | – | – | 38 |
| Anonymous user login to Nexus Repository Manager#540698 | Access Control | – | – | 24 |
| Listing of Amazon S3 Bucket accessible to any amazon authenticated user (vector-maps-e457472599)#631529 | Information Disclosure | – | – | 21 |
| Apache mod_status /server-status Information Disclosure#541347 | Information Disclosure | – | – | 9 |
| XSS Reflect#583561 | Cross-site Scripting | – | – | 7 |
| Reflected Cross Site Scripting vuln in tomtom.com#540428 | Cross-site Scripting | – | – | 4 |
| Reflected XSS on www.tomtom.com#557389 | Cross-site Scripting | – | – | 3 |
| CSRF allows attacker to manage customer's shopping cart.#540382 | Cross-Site Request Forgery | – | – | 1 |
Subdomains40,876
| Name | Scope | First seen |
|---|---|---|
| argo.aa.tomtom.comci | In scope | 2026-11-14 |
| jenkins-old.api-system.tomtom.comapi, ci, legacy | In scope | 2026-11-14 |
| argocd.cpp-dev-poi.tomtom.comci, dev | In scope | 2026-11-14 |
| jenkins.cpp-dev-poi.tomtom.comci, dev | In scope | 2026-11-14 |
| jenkins-build.cpp-dev-poi.tomtom.comci, dev | In scope | 2026-11-14 |
| teamcity.driverapps.tomtom.comci | In scope | 2026-11-14 |
| teamcity-staging.driverapps.tomtom.comci, staging | In scope | 2026-11-14 |
| argocd.olc-palanok-dev.fnr.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.olc-palanok-intg.fnr.tomtom.comci | In scope | 2026-11-14 |
| argocd.olc-palanok-prod.fnr.tomtom.comci | In scope | 2026-11-14 |
| argocd.vertex-prod-kor.fnr.tomtom.comci | In scope | 2026-11-14 |
| argocd.kf.dev.guidance.tomtom.comci, dev | In scope | 2026-11-14 |
| concourse.mapcontent-dev.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.capybaras-kafka.dev.maps-amf.tomtom.comci, data, dev | In scope | 2026-11-14 |
| argocd.capybaras-processing.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.gatest.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.goldenapples-kafka.dev.maps-amf.tomtom.comci, data, dev | In scope | 2026-11-14 |
| argocd.goldenapples-processing.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.inc-conf.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.inc-tr-merone.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.inc-tr.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.inc-turn.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| jenkins.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.osm-normalization.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.ove.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.restriction-ext.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.restriction-kafka.dev.maps-amf.tomtom.comci, data, dev | In scope | 2026-11-14 |
| argocd.restriction-stateless.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.restriction.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| feature-service.ci.restriction.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| prediction-service.ci.restriction.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| trace-matching-service.ci.restriction.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argo.speed.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.speed.dev.maps-amf.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.inc-tr.prod.koc.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.capybaras-kafka.prod.maps-amf.tomtom.comci, data | In scope | 2026-11-14 |
| argocd.capybaras-processing.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.goldenapples-bulk-processing.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.goldenapples-bulk2-processing.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.goldenapples-kafka.prod.maps-amf.tomtom.comci, data | In scope | 2026-11-14 |
| argocd.goldenapples-processing.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.inc-conf.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.inc-tr-merone.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.inc-tr.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| jenkins.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.oneway-bulk.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.osm-normalization.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.restriction-ext.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.restriction-kafka.prod.maps-amf.tomtom.comci, data | In scope | 2026-11-14 |
| argocd.restriction-stateless.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.restriction.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| argocd.speed.prod.maps-amf.tomtom.comci | In scope | 2026-11-14 |
| jenkins.maps-automated-maintenance.tomtom.comci | In scope | 2026-11-14 |
| jenkins-prod.maps-cfa.tomtom.comci | In scope | 2026-11-14 |
| jenkins.maps-cops.tomtom.comci | In scope | 2026-11-14 |
| jenkins-kor.maps-cops.tomtom.comci | In scope | 2026-11-14 |
| jenkins-new.maps-cops.tomtom.comci | In scope | 2026-11-14 |
| argo-cd.west-europe.maps-core-prod.tomtom.comci | In scope | 2026-11-14 |
| argo-cd-dev.west-europe.maps-core-prod.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-cd-prod.west-europe.maps-core-prod.tomtom.comci | In scope | 2026-11-14 |
| argocd.west-europe.maps-core-prod.tomtom.comci | In scope | 2026-11-14 |
| jenkins.west-europe.maps-core-prod.tomtom.comci | In scope | 2026-11-14 |
| argo-cd.maps-pu-poi.tomtom.comci | In scope | 2026-11-14 |
| jenkins.maps-pu-poi.tomtom.comci | In scope | 2026-11-14 |
| jenkins-for-prod.maps-pu-poi.tomtom.comci | In scope | 2026-11-14 |
| jenkins-kor.maps-pu-poi.tomtom.comci | In scope | 2026-11-14 |
| kr-argo-cd.maps-pu-poi.tomtom.comci | In scope | 2026-11-14 |
| jenkins.maps-rso-mesa.tomtom.comci | In scope | 2026-11-14 |
| jenkins-avro.nds.tomtom.comci | In scope | 2026-11-14 |
| jenkins-eng.nds.tomtom.comci | In scope | 2026-11-14 |
| jenkins-infra.nds.tomtom.comci | In scope | 2026-11-14 |
| jenkins-ops.nds.tomtom.comci | In scope | 2026-11-14 |
| jenkins-ops-kc.nds.tomtom.comci | In scope | 2026-11-14 |
| jenkins-preprod.nds.tomtom.comci, staging | In scope | 2026-11-14 |
| jenkins-rt.nds.tomtom.comci | In scope | 2026-11-14 |
| argocd.orbis-issuetracker.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.16770.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-cow.18292.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-discos.18292.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argocd.18292.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-discos.24612.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-cow.26616.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-discos.26616.discos-dev.orbis.tomtom.comci, dev | In scope | 2026-11-14 |
| argo-discos.18292.discos-staging.orbis.tomtom.comci, staging | In scope | 2026-11-14 |
| argo-discos.10099.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10102.10102.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.10129.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10168.10168.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.10168.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10313.10313.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.10313.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10384.10384.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10438.10438.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.10438.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10468.10468.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10574.10574.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10623.10623.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10778.10778.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-discos.10778.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
| argo-aks-discos-weu-prod-10919.10919.discos.orbis.tomtom.comci | In scope | 2026-11-14 |
40,800 names are covered by the program's own scope; 49 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.