Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
hextwd874-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hextwv329-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvfc437-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvmq679-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvqw358-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
sfserver.hexvsc957-hx-agent-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvsn582-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvsv225-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexvtg379-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexwtv635-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexwwb988-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexybk337-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexybk734-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexynf348-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexyts244-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexzct587-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexzhb895-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexzrv386-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hexzrw366-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
heymann-iserman1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irbcgm4488-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irbfcr2565-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irbhrj4454-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irdgwg3467-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irdrpm6387-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irdwyn8974-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irfbdq7493-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irfffg4499-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irffwy5735-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
sfserver.irgjgt8593-hx-agent-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irhfvb4699-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irjbdh7525-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irjpqw8334-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irkdvq9668-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irkggw8399-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irkrwg2747-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irkvpk7235-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irpctw5392-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irpzyn9954-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irqkwz5624-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irqvwc9389-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irrmcw4752-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irrrhb2282-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irsync9474-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irvkzq9698-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irvzwf9555-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irwggv7256-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
iryhyt7836-hx-webui-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
irzcyq9226-hxdmz-ssh-1.hex03.helix.apps.fireeye.comNot in the scope2026-11-14
hex04.helix.apps.fireeye.comNot in the scope2026-11-14
hex05.helix.apps.fireeye.comNot in the scope2026-11-14
hex07.helix.apps.fireeye.comNot in the scope2026-11-14
hexbkq686-hx-agent-1.hex07.helix.apps.fireeye.comNot in the scope2026-11-14
hexbnn652-hx-webui-1.hex07.helix.apps.fireeye.comNot in the scope2026-11-14
hexhkz585-hx-webui-1.hex07.helix.apps.fireeye.comNot in the scope2026-11-14
hexrhf928-hx-agent-1.hex07.helix.apps.fireeye.comNot in the scope2026-11-14
hex08.helix.apps.fireeye.comNot in the scope2026-11-14
hex85.helix.apps.fireeye.comNot in the scope2026-11-14
hex9jyygxy6fhrw-cms.helix.apps.fireeye.comadminNot in the scope2026-11-14
hex9jyygxy6fhrw-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexbbg774-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbdb427-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbdn247-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbng939-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexbnm545-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbpz532-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbtd968-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbty556-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbvh448-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbyj757-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexbzk376-hxdmz-ssh.helix.apps.fireeye.comNot in the scope2026-11-14
hexbzs526-hxdmz-agent-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexbzs526-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexcgt849-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexckh934-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexckh934-hxdmz-ssh-2.helix.apps.fireeye.comNot in the scope2026-11-14
hexcrt688-hx-webui-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexcrt688-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexctm373-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexcwq598-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexcyj664-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdff864-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdgd546-hxdmz-agent-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdgd546-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdhz639-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdrj989-cms.helix.apps.fireeye.comadminNot in the scope2026-11-14
hexdrj989-hx.helix.apps.fireeye.comNot in the scope2026-11-14
hexdrj989-hx-agent-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdrj989-hxdmz.helix.apps.fireeye.comNot in the scope2026-11-14
hexdtm593-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexdvc228-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexfgw922-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgbv224-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgcq656-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgcv388-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexggz755-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexggz839-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexggz956-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexghk623-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14
hexgpc753-hxdmz-ssh-1.helix.apps.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.