Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
agentm-uat.trellix.comtestIn scope2026-11-14
trellix-iam.qa.uam.api.trellix.comapi, auth, testIn scope2026-11-14
www.trellix-iam.qa.uam.api.trellix.comapi, auth, testIn scope2026-11-14
apigee-qa.trellix.comtestIn scope2026-11-14
qa.arc-ai1.trellix.comtestIn scope2026-11-14
uat.b2b-download.trellix.comtestIn scope2026-11-14
uat.betaupdate.trellix.comtestIn scope2026-11-14
boomi-gateway-qa.trellix.comtestIn scope2026-11-14
boomi-ofmintegration-qa.trellix.comtestIn scope2026-11-14
chatrecord-uat.trellix.comtestIn scope2026-11-14
uat.communitym.trellix.comtestIn scope2026-11-14
communitymsso-uat.trellix.comtestIn scope2026-11-14
crmavert-qa.trellix.comtestIn scope2026-11-14
www.crmavert-qa.trellix.comtestIn scope2026-11-14
customer-qa-login.trellix.comauth, testIn scope2026-11-14
uat.downloadcenter.trellix.comtestIn scope2026-11-14
edu-test-eu.etp.trellix.comtestIn scope2026-11-14
test77.etp.trellix.comtestIn scope2026-11-14
fic-uploads-uat.trellix.comdata, testIn scope2026-11-14
www.fic-uploads-uat.trellix.comdata, testIn scope2026-11-14
fic-uplods-uat.trellix.comtestIn scope2026-11-14
file-qa.trellix.comtestIn scope2026-11-14
www.file-qa.trellix.comtestIn scope2026-11-14
fileshare-uat-dnv.trellix.comtestIn scope2026-11-14
ftp-uat.trellix.comdata, testIn scope2026-11-14
fusionpubsecureconnect-qa.trellix.comtestIn scope2026-11-14
www.fusionpubsecureconnect-qa.trellix.comtestIn scope2026-11-14
fusionwebsecureconnect-qa.trellix.comtestIn scope2026-11-14
test-client.repm.gti.trellix.comtestIn scope2026-11-14
www.test-client.repm.gti.trellix.comtestIn scope2026-11-14
csupp-test.databus.gtiservice.trellix.comtestIn scope2026-11-14
healthwatch-qa.trellix.comtestIn scope2026-11-14
www.healthwatch-qa.trellix.comtestIn scope2026-11-14
healthwatch-uat.trellix.comtestIn scope2026-11-14
www.healthwatch-uat.trellix.comtestIn scope2026-11-14
qa.apps.helix.trellix.comtestIn scope2026-11-14
hapqa2.qa.apps.helix.trellix.comtestIn scope2026-11-14
hoot-qa.trellix.comtestIn scope2026-11-14
www.hoot-qa.trellix.comtestIn scope2026-11-14
hopper-stage-test.trellix.comstaging, testIn scope2026-11-14
test1.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test1.dev.insights.trellix.comdev, testIn scope2026-11-14
test2.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test2.dev.insights.trellix.comdev, testIn scope2026-11-14
test3.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test3.dev.insights.trellix.comdev, testIn scope2026-11-14
test4.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test4.dev.insights.trellix.comdev, testIn scope2026-11-14
test5.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test5.dev.insights.trellix.comdev, testIn scope2026-11-14
test6.dev.insights.trellix.comdev, testIn scope2026-11-14
www.test6.dev.insights.trellix.comdev, testIn scope2026-11-14
kbim-uat.trellix.comtestIn scope2026-11-14
kbim-uat2.trellix.comtestIn scope2026-11-14
kbm-uat.trellix.comtestIn scope2026-11-14
kbm-uat2.trellix.comtestIn scope2026-11-14
kcm-uat.trellix.comtestIn scope2026-11-14
kcm-uat2.trellix.comtestIn scope2026-11-14
epo-content-qa-updates.dev.manage.trellix.comadmin, dev, testIn scope2026-11-14
mfeagent-uat.trellix.comtestIn scope2026-11-14
mfechatrecord-uat.trellix.comtestIn scope2026-11-14
mfefic-uploads-uat.trellix.comdata, testIn scope2026-11-14
mfefileshare-uat-dnv.trellix.comtestIn scope2026-11-14
mfeftp-uat.trellix.comtestIn scope2026-11-14
mfekb-uat.trellix.comtestIn scope2026-11-14
mfekb-uat2.trellix.comtestIn scope2026-11-14
mfekbim-uat2.trellix.comtestIn scope2026-11-14
mfekc-uat.trellix.comtestIn scope2026-11-14
mfekc-uat2.trellix.comtestIn scope2026-11-14
mfemobileservicesidcs-uat.trellix.comtestIn scope2026-11-14
mfescp-uat.trellix.comtestIn scope2026-11-14
mfesftp-uat.trellix.comtestIn scope2026-11-14
mfesupport-uat.trellix.comtestIn scope2026-11-14
mobileservicesidcs-uat.trellix.comtestIn scope2026-11-14
www.mobileservicesidcs-uat.trellix.comtestIn scope2026-11-14
mspexperiencecloud-qa.trellix.comtestIn scope2026-11-14
www.mspexperiencecloud-qa.trellix.comtestIn scope2026-11-14
uat.nspupdate.trellix.comtestIn scope2026-11-14
api-files-qa.onecs.trellix.comapi, data, testIn scope2026-11-14
www.api-files-qa.onecs.trellix.comapi, data, testIn scope2026-11-14
opendxl-uat.trellix.comtestIn scope2026-11-14
origin-opendxl-uat.trellix.comtestIn scope2026-11-14
origin-partners-uat.trellix.comtestIn scope2026-11-14
origin-trellix-uat.trellix.comtestIn scope2026-11-14
partnerbusinesscenter-qa.trellix.comtestIn scope2026-11-14
www.partnerbusinesscenter-qa.trellix.comtestIn scope2026-11-14
partnerprogram-uat.trellix.comtestIn scope2026-11-14
partners-uat.trellix.comtestIn scope2026-11-14
www.partners-uat.trellix.comtestIn scope2026-11-14
qa.partnersso.trellix.comtestIn scope2026-11-14
prm-tools-uat.trellix.comtestIn scope2026-11-14
www.prm-tools-uat.trellix.comtestIn scope2026-11-14
qa-ares-avdat.trellix.comtestIn scope2026-11-14
qa-login.trellix.comauth, testIn scope2026-11-14
www.qa-login.trellix.comauth, testIn scope2026-11-14
qa-sftp.trellix.comdata, testIn scope2026-11-14
www.qa-sftp.trellix.comdata, testIn scope2026-11-14
agile.qa.trellix.comtestIn scope2026-11-14
agilefile.qa.trellix.comtestIn scope2026-11-14
b2bintegration.qa.trellix.comtestIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.