Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| agentm-uat.trellix.comtest | In scope | 2026-11-14 |
| trellix-iam.qa.uam.api.trellix.comapi, auth, test | In scope | 2026-11-14 |
| www.trellix-iam.qa.uam.api.trellix.comapi, auth, test | In scope | 2026-11-14 |
| apigee-qa.trellix.comtest | In scope | 2026-11-14 |
| qa.arc-ai1.trellix.comtest | In scope | 2026-11-14 |
| uat.b2b-download.trellix.comtest | In scope | 2026-11-14 |
| uat.betaupdate.trellix.comtest | In scope | 2026-11-14 |
| boomi-gateway-qa.trellix.comtest | In scope | 2026-11-14 |
| boomi-ofmintegration-qa.trellix.comtest | In scope | 2026-11-14 |
| chatrecord-uat.trellix.comtest | In scope | 2026-11-14 |
| uat.communitym.trellix.comtest | In scope | 2026-11-14 |
| communitymsso-uat.trellix.comtest | In scope | 2026-11-14 |
| crmavert-qa.trellix.comtest | In scope | 2026-11-14 |
| www.crmavert-qa.trellix.comtest | In scope | 2026-11-14 |
| customer-qa-login.trellix.comauth, test | In scope | 2026-11-14 |
| uat.downloadcenter.trellix.comtest | In scope | 2026-11-14 |
| edu-test-eu.etp.trellix.comtest | In scope | 2026-11-14 |
| test77.etp.trellix.comtest | In scope | 2026-11-14 |
| fic-uploads-uat.trellix.comdata, test | In scope | 2026-11-14 |
| www.fic-uploads-uat.trellix.comdata, test | In scope | 2026-11-14 |
| fic-uplods-uat.trellix.comtest | In scope | 2026-11-14 |
| file-qa.trellix.comtest | In scope | 2026-11-14 |
| www.file-qa.trellix.comtest | In scope | 2026-11-14 |
| fileshare-uat-dnv.trellix.comtest | In scope | 2026-11-14 |
| ftp-uat.trellix.comdata, test | In scope | 2026-11-14 |
| fusionpubsecureconnect-qa.trellix.comtest | In scope | 2026-11-14 |
| www.fusionpubsecureconnect-qa.trellix.comtest | In scope | 2026-11-14 |
| fusionwebsecureconnect-qa.trellix.comtest | In scope | 2026-11-14 |
| test-client.repm.gti.trellix.comtest | In scope | 2026-11-14 |
| www.test-client.repm.gti.trellix.comtest | In scope | 2026-11-14 |
| csupp-test.databus.gtiservice.trellix.comtest | In scope | 2026-11-14 |
| healthwatch-qa.trellix.comtest | In scope | 2026-11-14 |
| www.healthwatch-qa.trellix.comtest | In scope | 2026-11-14 |
| healthwatch-uat.trellix.comtest | In scope | 2026-11-14 |
| www.healthwatch-uat.trellix.comtest | In scope | 2026-11-14 |
| qa.apps.helix.trellix.comtest | In scope | 2026-11-14 |
| hapqa2.qa.apps.helix.trellix.comtest | In scope | 2026-11-14 |
| hoot-qa.trellix.comtest | In scope | 2026-11-14 |
| www.hoot-qa.trellix.comtest | In scope | 2026-11-14 |
| hopper-stage-test.trellix.comstaging, test | In scope | 2026-11-14 |
| test1.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test1.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| test2.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test2.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| test3.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test3.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| test4.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test4.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| test5.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test5.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| test6.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| www.test6.dev.insights.trellix.comdev, test | In scope | 2026-11-14 |
| kbim-uat.trellix.comtest | In scope | 2026-11-14 |
| kbim-uat2.trellix.comtest | In scope | 2026-11-14 |
| kbm-uat.trellix.comtest | In scope | 2026-11-14 |
| kbm-uat2.trellix.comtest | In scope | 2026-11-14 |
| kcm-uat.trellix.comtest | In scope | 2026-11-14 |
| kcm-uat2.trellix.comtest | In scope | 2026-11-14 |
| epo-content-qa-updates.dev.manage.trellix.comadmin, dev, test | In scope | 2026-11-14 |
| mfeagent-uat.trellix.comtest | In scope | 2026-11-14 |
| mfechatrecord-uat.trellix.comtest | In scope | 2026-11-14 |
| mfefic-uploads-uat.trellix.comdata, test | In scope | 2026-11-14 |
| mfefileshare-uat-dnv.trellix.comtest | In scope | 2026-11-14 |
| mfeftp-uat.trellix.comtest | In scope | 2026-11-14 |
| mfekb-uat.trellix.comtest | In scope | 2026-11-14 |
| mfekb-uat2.trellix.comtest | In scope | 2026-11-14 |
| mfekbim-uat2.trellix.comtest | In scope | 2026-11-14 |
| mfekc-uat.trellix.comtest | In scope | 2026-11-14 |
| mfekc-uat2.trellix.comtest | In scope | 2026-11-14 |
| mfemobileservicesidcs-uat.trellix.comtest | In scope | 2026-11-14 |
| mfescp-uat.trellix.comtest | In scope | 2026-11-14 |
| mfesftp-uat.trellix.comtest | In scope | 2026-11-14 |
| mfesupport-uat.trellix.comtest | In scope | 2026-11-14 |
| mobileservicesidcs-uat.trellix.comtest | In scope | 2026-11-14 |
| www.mobileservicesidcs-uat.trellix.comtest | In scope | 2026-11-14 |
| mspexperiencecloud-qa.trellix.comtest | In scope | 2026-11-14 |
| www.mspexperiencecloud-qa.trellix.comtest | In scope | 2026-11-14 |
| uat.nspupdate.trellix.comtest | In scope | 2026-11-14 |
| api-files-qa.onecs.trellix.comapi, data, test | In scope | 2026-11-14 |
| www.api-files-qa.onecs.trellix.comapi, data, test | In scope | 2026-11-14 |
| opendxl-uat.trellix.comtest | In scope | 2026-11-14 |
| origin-opendxl-uat.trellix.comtest | In scope | 2026-11-14 |
| origin-partners-uat.trellix.comtest | In scope | 2026-11-14 |
| origin-trellix-uat.trellix.comtest | In scope | 2026-11-14 |
| partnerbusinesscenter-qa.trellix.comtest | In scope | 2026-11-14 |
| www.partnerbusinesscenter-qa.trellix.comtest | In scope | 2026-11-14 |
| partnerprogram-uat.trellix.comtest | In scope | 2026-11-14 |
| partners-uat.trellix.comtest | In scope | 2026-11-14 |
| www.partners-uat.trellix.comtest | In scope | 2026-11-14 |
| qa.partnersso.trellix.comtest | In scope | 2026-11-14 |
| prm-tools-uat.trellix.comtest | In scope | 2026-11-14 |
| www.prm-tools-uat.trellix.comtest | In scope | 2026-11-14 |
| qa-ares-avdat.trellix.comtest | In scope | 2026-11-14 |
| qa-login.trellix.comauth, test | In scope | 2026-11-14 |
| www.qa-login.trellix.comauth, test | In scope | 2026-11-14 |
| qa-sftp.trellix.comdata, test | In scope | 2026-11-14 |
| www.qa-sftp.trellix.comdata, test | In scope | 2026-11-14 |
| agile.qa.trellix.comtest | In scope | 2026-11-14 |
| agilefile.qa.trellix.comtest | In scope | 2026-11-14 |
| b2bintegration.qa.trellix.comtest | In scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.