Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
idp.ap.fireeye.comauthNot in the scope2026-11-14
www.idp.ap.fireeye.comauthNot in the scope2026-11-14
api-iam-int.fireeye.comapi, authNot in the scope2026-11-14
api-iam-stg.fireeye.comapi, auth, stagingNot in the scope2026-11-14
iam.apps.fireeye.comauthNot in the scope2026-11-14
api-docs-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-feiam-qa.iam.apps.fireeye.comapi, auth, testNot in the scope2026-11-14
api-feiam-qa00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, stagingNot in the scope2026-11-14
api-gw-poc.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console-feiam-dev00-gc.iam.apps.fireeye.comadmin, auth, devNot in the scope2026-11-14
console-feiam-qa00.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
console-feiam-stg00-gc.iam.apps.fireeye.comadmin, auth, stagingNot in the scope2026-11-14
api.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
api-docs.feiam-dev00.iam.apps.fireeye.comapi, auth, devNot in the scope2026-11-14
console.feiam-dev00.iam.apps.fireeye.comadmin, auth, devNot in the scope2026-11-14
idp.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
notification.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
schema.feiam-dev00.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
api.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.feiam-prd00.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console.feiam-prd00.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
idp.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
notification.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema.feiam-prd00.iam.apps.fireeye.comauthNot in the scope2026-11-14
feiam-qa00-es-cluster.iam.apps.fireeye.comauthNot in the scope2026-11-14
grafana-int.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ap.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ca.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-eu.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-us.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-qa.iam.apps.fireeye.comauth, monitoring, testNot in the scope2026-11-14
grafana-stg.iam.apps.fireeye.comauth, monitoring, stagingNot in the scope2026-11-14
idp-feiam-dev00-gc.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
idp-feiam-qa00.iam.apps.fireeye.comauthNot in the scope2026-11-14
idp-feiam-stg00-gc.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-prod.iam.apps.fireeye.comauthNot in the scope2026-11-14
log-ingest-prod-server.iam.apps.fireeye.comauthNot in the scope2026-11-14
log-ingest-stg.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-stg-server.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
log-ingest-test.iam.apps.fireeye.comauth, testNot in the scope2026-11-14
log-ingest-test-server.iam.apps.fireeye.comauth, testNot in the scope2026-11-14
notification-feiam-dev00-gc.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
notification-feiam-qa00.iam.apps.fireeye.comauthNot in the scope2026-11-14
notification-feiam-stg00-gc.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
api.ops01-govcloud.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.ops01-govcloud.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console.ops01-govcloud.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
idp.ops01-govcloud.iam.apps.fireeye.comauthNot in the scope2026-11-14
notification.ops01-govcloud.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema.ops01-govcloud.iam.apps.fireeye.comauthNot in the scope2026-11-14
api.ops01.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
api-docs.ops01.iam.apps.fireeye.comapi, authNot in the scope2026-11-14
console.ops01.iam.apps.fireeye.comadmin, authNot in the scope2026-11-14
idp.ops01.iam.apps.fireeye.comauthNot in the scope2026-11-14
notification.ops01.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema.ops01.iam.apps.fireeye.comauthNot in the scope2026-11-14
trellix-iam-poc-sample1.poc.iam.apps.fireeye.comauthNot in the scope2026-11-14
sample.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema-feiam-dev00-gc.iam.apps.fireeye.comauth, devNot in the scope2026-11-14
schema-feiam-qa00.iam.apps.fireeye.comauthNot in the scope2026-11-14
schema-feiam-stg00-gc.iam.apps.fireeye.comauth, stagingNot in the scope2026-11-14
auth.fireeye.comauthNot in the scope2026-11-14
auth-dev.fireeye.comauth, devNot in the scope2026-11-14
auth-dev1.fireeye.comauth, devNot in the scope2026-11-14
auth-dev63.fireeye.comauth, devNot in the scope2026-11-14
auth-prod.fireeye.comauthNot in the scope2026-11-14
www.auth-prod.fireeye.comauthNot in the scope2026-11-14
auth-prod61.fireeye.comauthNot in the scope2026-11-14
www.auth-prod61.fireeye.comauthNot in the scope2026-11-14
auth-prod63.fireeye.comauthNot in the scope2026-11-14
www.auth-prod63.fireeye.comauthNot in the scope2026-11-14
auth-prod65.fireeye.comauthNot in the scope2026-11-14
auth-qa.fireeye.comauth, testNot in the scope2026-11-14
auth-stage.fireeye.comauth, stagingNot in the scope2026-11-14
www.auth-stage.fireeye.comauth, stagingNot in the scope2026-11-14
auth-stage65.fireeye.comauth, stagingNot in the scope2026-11-14
auth-staging.fireeye.comauth, stagingNot in the scope2026-11-14
www.auth-staging.fireeye.comauth, stagingNot in the scope2026-11-14
idp.ca.fireeye.comauthNot in the scope2026-11-14
idp.cloud.fireeye.comauthNot in the scope2026-11-14
sso.cloud.fireeye.comauthNot in the scope2026-11-14
console-iam-int.fireeye.comadmin, authNot in the scope2026-11-14
console-iam-stg.fireeye.comadmin, auth, stagingNot in the scope2026-11-14
or2b-etp-web-iam-stage-01.cso.fireeye.comauth, stagingNot in the scope2026-11-14
or2b-etp-web-iam-stage-02.cso.fireeye.comauth, stagingNot in the scope2026-11-14
usw2-etp-web-iam-dev-01.cso.fireeye.comauth, devNot in the scope2026-11-14
csp-login.fireeye.comauthNot in the scope2026-11-14
dev-identity.fireeye.comauth, devNot in the scope2026-11-14
dev-idp.fireeye.comauth, devNot in the scope2026-11-14
www.dev-idp.fireeye.comauth, devNot in the scope2026-11-14
dev1-identity.fireeye.comauth, devNot in the scope2026-11-14
docs-iam-int.fireeye.comauthNot in the scope2026-11-14
docs-iam-stg.fireeye.comauth, stagingNot in the scope2026-11-14
idp.eu.fireeye.comauthNot in the scope2026-11-14
www.idp.eu.fireeye.comauthNot in the scope2026-11-14
auth.faas.fireeye.comauthNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.