Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information DisclosureAnalysed#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| grafana.etp-dev01.cloud.apps.fireeye.comdev, monitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd01.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd06.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd07.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd08.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd09.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-prd11.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.etp-qa01.cloud.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana-int.iam.apps.fireeye.comauth, monitoring | Not in the scope | 2026-11-14 |
| grafana-prod-ap.iam.apps.fireeye.comauth, monitoring | Not in the scope | 2026-11-14 |
| grafana-prod-ca.iam.apps.fireeye.comauth, monitoring | Not in the scope | 2026-11-14 |
| grafana-prod-eu.iam.apps.fireeye.comauth, monitoring | Not in the scope | 2026-11-14 |
| grafana-prod-us.iam.apps.fireeye.comauth, monitoring | Not in the scope | 2026-11-14 |
| grafana-qa.iam.apps.fireeye.comauth, monitoring, test | Not in the scope | 2026-11-14 |
| grafana-stg.iam.apps.fireeye.comauth, monitoring, staging | Not in the scope | 2026-11-14 |
| grafana.prd03.infra.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.prd10.infra.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| metrics-api.apps.fireeye.comapi, monitoring | Not in the scope | 2026-11-14 |
| www.metrics-api.apps.fireeye.comapi, monitoring | Not in the scope | 2026-11-14 |
| grafana.sre-dev01.apps.fireeye.comdev, monitoring | Not in the scope | 2026-11-14 |
| grafana.sre-prod01.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| hexdev222-grafana.sre.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| smf-infr-splunk-srch-prod-1.cso.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.smf-infr-splunk-srch-prod-1.cso.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| usgova-etp-splunk-search-prod-vip.cso.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| usgovb-etp-splunk-search-prod-vip.cso.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| labs-alertmanager-blr.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.labs-alertmanager-blr.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| labs-monitor-blr.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.labs-monitor-blr.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| labs-prom-grafana.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.labs-prom-grafana.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| labs-prom-monitor.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.labs-prom-monitor.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| splunk-collector-01.eng.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.ap.feconnect.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.eu.feconnect.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.feconnect.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| grafana.staging.feconnect.fireeye.commonitoring, staging | Not in the scope | 2026-11-14 |
| grafana.test.feconnect.fireeye.commonitoring, test | Not in the scope | 2026-11-14 |
| lvs-infr-splunk-srch-prod-1.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.lvs-infr-splunk-srch-prod-1.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| metrics.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| kibana.selabs.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| status.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| www.status.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| graylog.a.sjc.training.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| sentry.sjc.training.fireeye.commonitoring | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.