Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
api-files.trellix.comapi, dataIn scope2026-11-14
fic-uploads.trellix.comdataIn scope2026-11-14
fic-uploads-uat.trellix.comdata, testIn scope2026-11-14
www.fic-uploads-uat.trellix.comdata, testIn scope2026-11-14
files.trellix.comdataIn scope2026-11-14
files-east.trellix.comdataIn scope2026-11-14
files-west.trellix.comdataIn scope2026-11-14
www.files.trellix.comdataIn scope2026-11-14
ftp.trellix.comdataIn scope2026-11-14
ftp-uat.trellix.comdata, testIn scope2026-11-14
mfefic-uploads-uat.trellix.comdata, testIn scope2026-11-14
api-files.onecs.trellix.comapi, dataIn scope2026-11-14
api-files-csepoc.onecs.trellix.comapi, dataIn scope2026-11-14
www.api-files-csepoc.onecs.trellix.comapi, dataIn scope2026-11-14
api-files-csmock.onecs.trellix.comapi, dataIn scope2026-11-14
www.api-files-csmock.onecs.trellix.comapi, dataIn scope2026-11-14
api-files-dev.onecs.trellix.comapi, data, devIn scope2026-11-14
www.api-files-dev.onecs.trellix.comapi, data, devIn scope2026-11-14
api-files-qa.onecs.trellix.comapi, data, testIn scope2026-11-14
www.api-files-qa.onecs.trellix.comapi, data, testIn scope2026-11-14
api-files-tcoe.onecs.trellix.comapi, dataIn scope2026-11-14
www.api-files-tcoe.onecs.trellix.comapi, dataIn scope2026-11-14
www.api-files.onecs.trellix.comapi, dataIn scope2026-11-14
qa-sftp.trellix.comdata, testIn scope2026-11-14
www.qa-sftp.trellix.comdata, testIn scope2026-11-14
vhmuuda1ftp01.sap.trellix.comdataIn scope2026-11-14
vhmuupa1ftp01.sap.trellix.comdataIn scope2026-11-14
sftp.securefiles.trellix.comdataIn scope2026-11-14
sftp.trellix.comdataIn scope2026-11-14
sftp-uat.trellix.comdata, testIn scope2026-11-14
files.tcx.trellix.comdataIn scope2026-11-14
files-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-extradat.tcx.trellix.comdataIn scope2026-11-14
files-extradat-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-extradat-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-extradat-mock.tcx.trellix.comdataIn scope2026-11-14
www.files-extradat-mock.tcx.trellix.comdataIn scope2026-11-14
files-extradat-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-extradat-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-extradat.tcx.trellix.comdataIn scope2026-11-14
files-malware.tcx.trellix.comdataIn scope2026-11-14
files-malware-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-malware-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-malware-mock.tcx.trellix.comdataIn scope2026-11-14
www.files-malware-mock.tcx.trellix.comdataIn scope2026-11-14
files-malware-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-malware-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-malware.tcx.trellix.comdataIn scope2026-11-14
files-mock.tcx.trellix.comdataIn scope2026-11-14
www.files-mock.tcx.trellix.comdataIn scope2026-11-14
files-patch.tcx.trellix.comdataIn scope2026-11-14
files-patch-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-patch-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-patch-mock.tcx.trellix.comdataIn scope2026-11-14
www.files-patch-mock.tcx.trellix.comdataIn scope2026-11-14
files-patch-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-patch-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-patch.tcx.trellix.comdataIn scope2026-11-14
files-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-qa.tcx.trellix.comdata, testIn scope2026-11-14
files-rma.tcx.trellix.comdataIn scope2026-11-14
files-rma-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-rma-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-rma-fed-dev.tcx.trellix.comdata, devIn scope2026-11-14
www.files-rma-fed-dev.tcx.trellix.comdata, devIn scope2026-11-14
files-rma-mock.tcx.trellix.comdataIn scope2026-11-14
files-rma-qa.tcx.trellix.comdata, testIn scope2026-11-14
www.files-rma.tcx.trellix.comdataIn scope2026-11-14
www.files.tcx.trellix.comdataIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.