Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
api.ap.fireeye.comapiNot in the scope2026-11-14
api-docs.ap.fireeye.comapiNot in the scope2026-11-14
www.api-docs.ap.fireeye.comapiNot in the scope2026-11-14
www.api.ap.fireeye.comapiNot in the scope2026-11-14
api-iam-int.fireeye.comapi, authNot in the scope2026-11-14
api-iam-stg.fireeye.comapi, auth, stagingNot in the scope2026-11-14
ccs-api-dev01-blue.etp-dev01.cloud.apps.fireeye.comapi, devNot in the scope2026-11-14
ccs-api-dev01-green.etp-dev01.cloud.apps.fireeye.comapi, devNot in the scope2026-11-14
ccs-api-qa01-blue.etp-dev01.cloud.apps.fireeye.comapi, devNot in the scope2026-11-14
ccs-api-qa01-green.etp-dev01.cloud.apps.fireeye.comapi, devNot in the scope2026-11-14
ccs-api-prd01-blue.etp-prd01.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd01-green.etp-prd01.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd06-blue.etp-prd06.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd06-green.etp-prd06.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd07-blue.etp-prd07.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd07-green.etp-prd07.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd08-blue.etp-prd08.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd08-green.etp-prd08.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd09-blue.etp-prd09.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd09-green.etp-prd09.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd11-blue.etp-prd11.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-prd11-green.etp-prd11.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-qa01-blue.etp-qa01.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-qa01-green.etp-qa01.cloud.apps.fireeye.comapiNot in the scope2026-11-14
ccs-api-dev01.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, toolsNot in the scope2026-11-14
etp-simple-api-app.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, toolsNot in the scope2026-11-14
etp-stage-simple-api-app.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, staging, toolsNot in the scope2026-11-14
blue-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, toolsNot in the scope2026-11-14
etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, toolsNot in the scope2026-11-14
etp-stage-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, toolsNot in the scope2026-11-14
green-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, toolsNot in the scope2026-11-14
stage-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, toolsNot in the scope2026-11-14
etp-simple-api-app.k8s-etp-qa01.cloud.apps.fireeye.comapi, toolsNot in the scope2026-11-14
etp-stage-simple-api-app.k8s-etp-qa01.cloud.apps.fireeye.comapi, staging, toolsNot in the scope2026-11-14
api.darwin.apps.fireeye.comapiNot in the scope2026-11-14
www.api.darwin.apps.fireeye.comapiNot in the scope2026-11-14
api2.darwin.apps.fireeye.comapiNot in the scope2026-11-14
www.api2.darwin.apps.fireeye.comapiNot in the scope2026-11-14
delta5-kub-test-api.delta5kub.apps.fireeye.comapi, testNot in the scope2026-11-14
api-docs-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-feiam-qa.iam.apps.fireeye.comapi, auth, testNot in the scope2026-11-14
api-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-gw-poc.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api.ops01-govcloud.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.ops01-govcloud.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api.ops01.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.ops01.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
titan-api.marketplace.apps.fireeye.comapiNot in the scope2026-11-14
www.titan-api.marketplace.apps.fireeye.comapiNot in the scope2026-11-14
metrics-api.apps.fireeye.comapi, monitoringNot in the scope2026-11-14
www.metrics-api.apps.fireeye.comapi, monitoringNot in the scope2026-11-14
api.storytime.apps.fireeye.comapiNot in the scope2026-11-14
qa.api.darwin.test02-usw2.apps.fireeye.comapi, testNot in the scope2026-11-14
www.qa.api.darwin.test02-usw2.apps.fireeye.comapi, testNot in the scope2026-11-14
zulu0kub-test-api.testkub.apps.fireeye.comapi, testNot in the scope2026-11-14
api.ca.fireeye.comapiNot in the scope2026-11-14
api-docs.ca.fireeye.comapiNot in the scope2026-11-14
api.cloud.fireeye.comapiNot in the scope2026-11-14
iad-cc-api-prod-01.cso.fireeye.comapiNot in the scope2026-11-14
iad-cc-api-prod-02.cso.fireeye.comapiNot in the scope2026-11-14
or2b-etp-rest-api-stage-01.cso.fireeye.comapi, stagingNot in the scope2026-11-14
smf-cc-api-prod-01.cso.fireeye.comapiNot in the scope2026-11-14
usw2-etp-rest-api-dev-02.cso.fireeye.comapi, devNot in the scope2026-11-14
api-neptune.datalake.fireeye.comapiNot in the scope2026-11-14
api-neptune-qa.datalake.fireeye.comapi, testNot in the scope2026-11-14
api-neptune-stage.datalake.fireeye.comapi, stagingNot in the scope2026-11-14
containment-api.docs.endpoint.fireeye.comapiNot in the scope2026-11-14
api.eu.fireeye.comapiNot in the scope2026-11-14
api-docs.eu.fireeye.comapiNot in the scope2026-11-14
www.api-docs.eu.fireeye.comapiNot in the scope2026-11-14
www.api.eu.fireeye.comapiNot in the scope2026-11-14
api.ap.feconnect.fireeye.comapiNot in the scope2026-11-14
api.staging.ap.feconnect.fireeye.comapi, stagingNot in the scope2026-11-14
api.feconnect.fireeye.comapiNot in the scope2026-11-14
api.eu.feconnect.fireeye.comapiNot in the scope2026-11-14
api.staging.eu.feconnect.fireeye.comapi, stagingNot in the scope2026-11-14
api.staging.feconnect.fireeye.comapi, stagingNot in the scope2026-11-14
athena-api.staging.feconnect.fireeye.comapi, stagingNot in the scope2026-11-14
api.test.feconnect.fireeye.comapi, testNot in the scope2026-11-14
api.horizon.fireeye.comapi, vpnNot in the scope2026-11-14
api-dev.horizon.fireeye.comapi, dev, vpnNot in the scope2026-11-14
api.intelligence.fireeye.comapiNot in the scope2026-11-14
api-dev.intelligence.fireeye.comapi, devNot in the scope2026-11-14
api-qa.intelligence.fireeye.comapi, testNot in the scope2026-11-14
api-staging.intelligence.fireeye.comapi, stagingNot in the scope2026-11-14
www.api-staging.intelligence.fireeye.comapi, stagingNot in the scope2026-11-14
www.api.intelligence.fireeye.comapiNot in the scope2026-11-14
api.kops.fireeye.comapiNot in the scope2026-11-14
hc-api.selabs.fireeye.comapiNot in the scope2026-11-14
api.services.fireeye.comapiNot in the scope2026-11-14
api-dev.services.fireeye.comapi, devNot in the scope2026-11-14
api-qa.services.fireeye.comapi, testNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.