Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| auditlog.manage.staging.cloud.trellix.comadmin, staging | In scope | 2026-11-14 |
| one-console.dev.design.trellix.comadmin, dev | In scope | 2026-11-14 |
| console.aura.dev.trellix.comadmin, dev | In scope | 2026-11-14 |
| dashboard.cloudsupport-dev.gtiservice.trellix.comadmin, dev | In scope | 2026-11-14 |
| www.dashboard.cloudsupport-dev.gtiservice.trellix.comadmin, dev | In scope | 2026-11-14 |
| dashboard.csupp.gtiservice.trellix.comadmin | In scope | 2026-11-14 |
| dashboard-beta.csupp.gtiservice.trellix.comadmin, staging | In scope | 2026-11-14 |
| dashboard-failover.csupp.gtiservice.trellix.comadmin | In scope | 2026-11-14 |
| manage.trellix.comadmin | In scope | 2026-11-14 |
| account.manage.trellix.comadmin | In scope | 2026-11-14 |
| ah-usw003.manage.trellix.comadmin | In scope | 2026-11-14 |
| api.manage.trellix.comadmin, api | In scope | 2026-11-14 |
| saaspartner.api.manage.trellix.comadmin, api | In scope | 2026-11-14 |
| auditlog.manage.trellix.comadmin | In scope | 2026-11-14 |
| www.auditlog.manage.trellix.comadmin | In scope | 2026-11-14 |
| account.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| saaspartner.api.beta.manage.trellix.comadmin, api, staging | In scope | 2026-11-14 |
| bps.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| bps-rdp.beta.manage.trellix.comadmin, staging, vpn | In scope | 2026-11-14 |
| bps-scsp.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| bpsapis.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| content.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| login.beta.manage.trellix.comadmin, auth, staging | In scope | 2026-11-14 |
| login-internal.beta.manage.trellix.comadmin, auth, internal, staging | In scope | 2026-11-14 |
| partnerbusinesscenter.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| partners.beta.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| bps.manage.trellix.comadmin | In scope | 2026-11-14 |
| bps-rdp.manage.trellix.comadmin, vpn | In scope | 2026-11-14 |
| bps-scsp.manage.trellix.comadmin | In scope | 2026-11-14 |
| bpsapis.manage.trellix.comadmin | In scope | 2026-11-14 |
| cdn-eu001.manage.trellix.comadmin | In scope | 2026-11-14 |
| cdn-usw001.manage.trellix.comadmin | In scope | 2026-11-14 |
| cdn-usw002.manage.trellix.comadmin | In scope | 2026-11-14 |
| cdn-usw003.manage.trellix.comadmin | In scope | 2026-11-14 |
| content.manage.trellix.comadmin | In scope | 2026-11-14 |
| dev.manage.trellix.comadmin, dev | In scope | 2026-11-14 |
| api.dev.manage.trellix.comadmin, api, dev | In scope | 2026-11-14 |
| devops.dev.manage.trellix.comadmin, dev | In scope | 2026-11-14 |
| epo-content-qa-updates.dev.manage.trellix.comadmin, dev, test | In scope | 2026-11-14 |
| tps.dev.manage.trellix.comadmin, dev | In scope | 2026-11-14 |
| www.dev.manage.trellix.comadmin, dev | In scope | 2026-11-14 |
| developer.manage.trellix.comadmin | In scope | 2026-11-14 |
| dlp.manage.trellix.comadmin | In scope | 2026-11-14 |
| dxl-usw003.manage.trellix.comadmin | In scope | 2026-11-14 |
| dxlweb-usw003.manage.trellix.comadmin | In scope | 2026-11-14 |
| api-cws.eu-central-1.manage.trellix.comadmin, api | In scope | 2026-11-14 |
| login.manage.trellix.comadmin, auth | In scope | 2026-11-14 |
| login-internal.manage.trellix.comadmin, auth, internal | In scope | 2026-11-14 |
| marketplace.manage.trellix.comadmin | In scope | 2026-11-14 |
| onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| ah-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| cdn-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| cds-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| dxl-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| rdp.onet.manage.trellix.comadmin, vpn | In scope | 2026-11-14 |
| sw-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| ui-t1.onet.manage.trellix.comadmin | In scope | 2026-11-14 |
| partnerbusinesscenter.manage.trellix.comadmin | In scope | 2026-11-14 |
| partners.manage.trellix.comadmin | In scope | 2026-11-14 |
| preprod.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| auditlog.preprod.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| dlp.preprod.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| www.preprod.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| staging.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| auditlog.staging.manage.trellix.comadmin, staging | In scope | 2026-11-14 |
| api-cws.us-west-2.manage.trellix.comadmin, api | In scope | 2026-11-14 |
| www.manage.trellix.comadmin | In scope | 2026-11-14 |
| dashboard.vpn.staging.mdr.trellix.comadmin, staging, vpn | In scope | 2026-11-14 |
| dashboard.vpn.mdr.trellix.comadmin, vpn | In scope | 2026-11-14 |
| console.mobile.security.trellix.comadmin | In scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.