Skip to content
Connect AISign inSign up free

Bug bounty program

TR

Trellix

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Root:skyhighsecurity.com
Scope:In scope
Name suggests
First seen
Text fileClear filters43 names
Subdomains of Trellix
NameScopeFirst seen
argocd.ayldp.skyhighsecurity.comciIn scope2026-11-14
docker-infra.ayldp.skyhighsecurity.comtoolsIn scope2026-11-14
iam-qiblade.ayldp.skyhighsecurity.comauthIn scope2026-11-14
www.iam-qiblade.ayldp.skyhighsecurity.comauthIn scope2026-11-14
careers.skyhighsecurity.comIn scope2026-11-14
www.careers.skyhighsecurity.comIn scope2026-11-14
email.skyhighsecurity.comIn scope2026-11-14
explore.skyhighsecurity.comIn scope2026-11-14
globalvpn.skyhighsecurity.comIn scope2026-11-14
hopper.skyhighsecurity.comIn scope2026-11-14
hopper-stage.skyhighsecurity.comstagingIn scope2026-11-14
partnerportal-dev.skyhighsecurity.comdevIn scope2026-11-14
www.partnerportal-dev.skyhighsecurity.comdevIn scope2026-11-14
partnerportal-qa.skyhighsecurity.comtestIn scope2026-11-14
www.partnerportal-qa.skyhighsecurity.comtestIn scope2026-11-14
partners.skyhighsecurity.comIn scope2026-11-14
partners-stg-login.skyhighsecurity.comauth, stagingIn scope2026-11-14
www.partners.skyhighsecurity.comIn scope2026-11-14
partnersso.skyhighsecurity.comIn scope2026-11-14
qa.partnersso.skyhighsecurity.comtestIn scope2026-11-14
stg.partnersso.skyhighsecurity.comstagingIn scope2026-11-14
pdt.skyhighsecurity.comIn scope2026-11-14
pdtqa.skyhighsecurity.comIn scope2026-11-14
o3.ptr1572.skyhighsecurity.comIn scope2026-11-14
o2.ptr1853.skyhighsecurity.comIn scope2026-11-14
reference-qa.skyhighsecurity.comtestIn scope2026-11-14
resources.skyhighsecurity.comIn scope2026-11-14
skyhighsecurity-uat.skyhighsecurity.comtestIn scope2026-11-14
www.skyhighsecurity-uat.skyhighsecurity.comtestIn scope2026-11-14
smetrics.skyhighsecurity.comIn scope2026-11-14
sse-uat.skyhighsecurity.comtestIn scope2026-11-14
www.sse-uat.skyhighsecurity.comtestIn scope2026-11-14
sso.skyhighsecurity.comauthIn scope2026-11-14
staging.skyhighsecurity.comstagingIn scope2026-11-14
static.skyhighsecurity.comIn scope2026-11-14
status.skyhighsecurity.commonitoringIn scope2026-11-14
success.skyhighsecurity.comIn scope2026-11-14
successtest.skyhighsecurity.comIn scope2026-11-14
trust.skyhighsecurity.comIn scope2026-11-14
de-pav-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
in-ban-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
www.skyhighsecurity.comIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated