Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| admin.fireeye.comadmin | Not in the scope | 2026-11-14 |
| ahajsandbox.fireeye.com | Not in the scope | 2026-11-14 |
| ahatest.fireeye.com | Not in the scope | 2026-11-14 |
| www.ahatest.fireeye.com | Not in the scope | 2026-11-14 |
| aidb.fireeye.com | Not in the scope | 2026-11-14 |
| aidb-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| aiws.fireeye.com | Not in the scope | 2026-11-14 |
| aiws-dev1.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.aiws-dev1.fireeye.comdev | Not in the scope | 2026-11-14 |
| aiws-dev2.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.aiws-dev2.fireeye.comdev | Not in the scope | 2026-11-14 |
| aiws-dev3.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.aiws-dev3.fireeye.comdev | Not in the scope | 2026-11-14 |
| aiws-dev4.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.aiws-dev4.fireeye.comdev | Not in the scope | 2026-11-14 |
| aiws-dev5.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.aiws-dev5.fireeye.comdev | Not in the scope | 2026-11-14 |
| aiws-qa.fireeye.comtest | Not in the scope | 2026-11-14 |
| www.aiws-qa.fireeye.comtest | Not in the scope | 2026-11-14 |
| aiws-qa2.fireeye.com | Not in the scope | 2026-11-14 |
| www.aiws-qa2.fireeye.com | Not in the scope | 2026-11-14 |
| aiws-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.aiws.fireeye.com | Not in the scope | 2026-11-14 |
| ambassadors.fireeye.com | Not in the scope | 2026-11-14 |
| www.ambassadors.fireeye.com | Not in the scope | 2026-11-14 |
| amer-rewards.fireeye.com | Not in the scope | 2026-11-14 |
| ap.fireeye.com | Not in the scope | 2026-11-14 |
| api.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-docs.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api-docs.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| console.ap.fireeye.comadmin | Not in the scope | 2026-11-14 |
| www.console.ap.fireeye.comadmin | Not in the scope | 2026-11-14 |
| etp.ap.fireeye.com | Not in the scope | 2026-11-14 |
| helix.ap.fireeye.com | Not in the scope | 2026-11-14 |
| hapap2.helix.ap.fireeye.com | Not in the scope | 2026-11-14 |
| www.helix.ap.fireeye.com | Not in the scope | 2026-11-14 |
| idp.ap.fireeye.comauth | Not in the scope | 2026-11-14 |
| www.idp.ap.fireeye.comauth | Not in the scope | 2026-11-14 |
| notification.ap.fireeye.com | Not in the scope | 2026-11-14 |
| www.notification.ap.fireeye.com | Not in the scope | 2026-11-14 |
| schema.ap.fireeye.com | Not in the scope | 2026-11-14 |
| www.schema.ap.fireeye.com | Not in the scope | 2026-11-14 |
| api-iam-int.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-iam-stg.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| apps.fireeye.com | Not in the scope | 2026-11-14 |
| stefano.aive.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| avsuite.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| avsuite-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| binocolo.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| binocolo-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| binocolo-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ap-northeast-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ap-northeast-2.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ap-south-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ap-southeast-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ap-southeast-2.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| ca-central-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| eu-central-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| eu-north-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| eu-west-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| eu-west-2.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| eu-west-3.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| sa-east-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| start.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| us-east-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| us-east-2.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| us-west-1.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| us-west-2.cloudvisory-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-cloudvisory.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-helix.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| faude-dev.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| faude-dev1.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| faude-dev2.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| faude-qa1.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| faude-res.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| faude-res1.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| faude3.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| faude3-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| felabs.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| gc-qa2.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| helix-integrations.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| landingpages.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| landingpages-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| www.landingpages-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| optimus.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| qa-helixconnect.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| redzone.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| stage-helixconnect.cloud.aws.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| ui-dev-helix.cloud.aws.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| unity.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| unity-qa.cloud.aws.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| zeppelin.cloud.aws.apps.fireeye.com | Not in the scope | 2026-11-14 |
| cis.apps.fireeye.com | Not in the scope | 2026-11-14 |
| dev.cis.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| dss3.cis.apps.fireeye.com | Not in the scope | 2026-11-14 |
| prod.cis.apps.fireeye.com | Not in the scope | 2026-11-14 |
| cred.report.cis.apps.fireeye.com | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.