Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
sre.apps.fireeye.comNot in the scope2026-11-14
crashlanding.cluster.sre-dev01.apps.fireeye.comdevNot in the scope2026-11-14
crashlanding.sre-dev01.apps.fireeye.comdevNot in the scope2026-11-14
duo.sre-dev01.apps.fireeye.comdevNot in the scope2026-11-14
grafana.sre-dev01.apps.fireeye.comdev, monitoringNot in the scope2026-11-14
crashlanding.cluster.sre-prod01.apps.fireeye.comNot in the scope2026-11-14
crashlanding.sre-prod01.apps.fireeye.comNot in the scope2026-11-14
docs.sre-prod01.apps.fireeye.comNot in the scope2026-11-14
drone.sre-prod01.apps.fireeye.comciNot in the scope2026-11-14
duo.sre-prod01.apps.fireeye.comNot in the scope2026-11-14
etp-drone.sre-prod01.apps.fireeye.comciNot in the scope2026-11-14
grafana.sre-prod01.apps.fireeye.commonitoringNot in the scope2026-11-14
argo.sre.apps.fireeye.comciNot in the scope2026-11-14
argocd.sre.apps.fireeye.comciNot in the scope2026-11-14
drone.sre.apps.fireeye.comciNot in the scope2026-11-14
fsocust002.sre.apps.fireeye.comNot in the scope2026-11-14
fsocust003.sre.apps.fireeye.comNot in the scope2026-11-14
fsocust004.sre.apps.fireeye.comNot in the scope2026-11-14
fsocust002.fsodev02.sre.apps.fireeye.comNot in the scope2026-11-14
fsocust003.fsodev02.sre.apps.fireeye.comNot in the scope2026-11-14
fsocust004.fsodev02.sre.apps.fireeye.comNot in the scope2026-11-14
hexdev222-grafana.sre.apps.fireeye.commonitoringNot in the scope2026-11-14
sonarqube.sre.apps.fireeye.comtoolsNot in the scope2026-11-14
teamcity.sre.apps.fireeye.comciNot in the scope2026-11-14
try.sre.apps.fireeye.comNot in the scope2026-11-14
dnstest-drone.try.sre.apps.fireeye.comciNot in the scope2026-11-14
duo.try.sre.apps.fireeye.comNot in the scope2026-11-14
httpserver.try.sre.apps.fireeye.comNot in the scope2026-11-14
infra-drone.try.sre.apps.fireeye.comciNot in the scope2026-11-14
whitesource.sre.apps.fireeye.comNot in the scope2026-11-14
staging.apps.fireeye.comstagingNot in the scope2026-11-14
hapstg1.staging.apps.fireeye.comstagingNot in the scope2026-11-14
hapstg2.staging.apps.fireeye.comstagingNot in the scope2026-11-14
static.apps.fireeye.comNot in the scope2026-11-14
email.static.apps.fireeye.comNot in the scope2026-11-14
storytime.apps.fireeye.comNot in the scope2026-11-14
api.storytime.apps.fireeye.comapiNot in the scope2026-11-14
arb.svpc.apps.fireeye.comNot in the scope2026-11-14
dev.arb.svpc.apps.fireeye.comdevNot in the scope2026-11-14
dev2.arb.svpc.apps.fireeye.comdevNot in the scope2026-11-14
development.arb.svpc.apps.fireeye.comdevNot in the scope2026-11-14
prd.arb.svpc.apps.fireeye.comNot in the scope2026-11-14
pte.arb.svpc.apps.fireeye.comNot in the scope2026-11-14
qa.arb.svpc.apps.fireeye.comtestNot in the scope2026-11-14
stg.arb.svpc.apps.fireeye.comstagingNot in the scope2026-11-14
www.arb.svpc.apps.fireeye.comNot in the scope2026-11-14
athena.svpc.apps.fireeye.comNot in the scope2026-11-14
dtrk.svpc.apps.fireeye.comNot in the scope2026-11-14
prd.dtrk.svpc.apps.fireeye.comNot in the scope2026-11-14
stg.dtrk.svpc.apps.fireeye.comstagingNot in the scope2026-11-14
www.dtrk.svpc.apps.fireeye.comNot in the scope2026-11-14
tapvar.apps.fireeye.comNot in the scope2026-11-14
dev.tapvar.apps.fireeye.comdevNot in the scope2026-11-14
tapvardev.apps.fireeye.comNot in the scope2026-11-14
test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
telemetry.b1.test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
darwin.test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
qa.api.darwin.test02-usw2.apps.fireeye.comapi, testNot in the scope2026-11-14
www.qa.api.darwin.test02-usw2.apps.fireeye.comapi, testNot in the scope2026-11-14
dronerunner.test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
etp-airflow.test02-usw2.apps.fireeye.comtest, toolsNot in the scope2026-11-14
etp-detection-repository.test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
telemetry.test02-usw2.apps.fireeye.comtestNot in the scope2026-11-14
letest2.testkub.apps.fireeye.comNot in the scope2026-11-14
zulu0kub-test.testkub.apps.fireeye.comtestNot in the scope2026-11-14
zulu0kub-test-api.testkub.apps.fireeye.comapi, testNot in the scope2026-11-14
tokenserver.apps.fireeye.comNot in the scope2026-11-14
prod.tokenserver.apps.fireeye.comNot in the scope2026-11-14
ui.apps.fireeye.comNot in the scope2026-11-14
stage.us.apps.fireeye.comstagingNot in the scope2026-11-14
federation-admin.blue.stage.us.apps.fireeye.comadmin, stagingNot in the scope2026-11-14
federation.stage.us.apps.fireeye.comstagingNot in the scope2026-11-14
federation-admin.stage.us.apps.fireeye.comadmin, stagingNot in the scope2026-11-14
federation-admin-blue.stage.us.apps.fireeye.comadmin, stagingNot in the scope2026-11-14
federation-admin-green.stage.us.apps.fireeye.comadmin, stagingNot in the scope2026-11-14
federation-blue.stage.us.apps.fireeye.comstagingNot in the scope2026-11-14
federation-green.stage.us.apps.fireeye.comstagingNot in the scope2026-11-14
www.federation.stage.us.apps.fireeye.comstagingNot in the scope2026-11-14
federation-admin.green.stage.us.apps.fireeye.comadmin, stagingNot in the scope2026-11-14
telemetry.vaan.apps.fireeye.comNot in the scope2026-11-14
telemetry.vaan02.apps.fireeye.comNot in the scope2026-11-14
arc.fireeye.comNot in the scope2026-11-14
www.arc.fireeye.comNot in the scope2026-11-14
ars.fireeye.comNot in the scope2026-11-14
artifactory-va.fireeye.comtoolsNot in the scope2026-11-14
ashvpn.fireeye.comNot in the scope2026-11-14
ati.fireeye.comNot in the scope2026-11-14
ati-stage.fireeye.comstagingNot in the scope2026-11-14
www.ati-stage.fireeye.comstagingNot in the scope2026-11-14
www.ati.fireeye.comNot in the scope2026-11-14
ati3.fireeye.comNot in the scope2026-11-14
atiapi-stage.fireeye.comstagingNot in the scope2026-11-14
auth.fireeye.comauthNot in the scope2026-11-14
auth-dev.fireeye.comauth, devNot in the scope2026-11-14
auth-dev1.fireeye.comauth, devNot in the scope2026-11-14
auth-dev63.fireeye.comauth, devNot in the scope2026-11-14
auth-prod.fireeye.comauthNot in the scope2026-11-14
www.auth-prod.fireeye.comauthNot in the scope2026-11-14
auth-prod61.fireeye.comauthNot in the scope2026-11-14
www.auth-prod61.fireeye.comauthNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.