Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| crashlanding.cluster.sre-dev01.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| crashlanding.sre-dev01.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| duo.sre-dev01.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| grafana.sre-dev01.apps.fireeye.comdev, monitoring | Not in the scope | 2026-11-14 |
| crashlanding.cluster.sre-prod01.apps.fireeye.com | Not in the scope | 2026-11-14 |
| crashlanding.sre-prod01.apps.fireeye.com | Not in the scope | 2026-11-14 |
| docs.sre-prod01.apps.fireeye.com | Not in the scope | 2026-11-14 |
| drone.sre-prod01.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| duo.sre-prod01.apps.fireeye.com | Not in the scope | 2026-11-14 |
| etp-drone.sre-prod01.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| grafana.sre-prod01.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| argo.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| argocd.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| drone.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| fsocust002.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| fsocust003.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| fsocust004.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| fsocust002.fsodev02.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| fsocust003.fsodev02.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| fsocust004.fsodev02.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| hexdev222-grafana.sre.apps.fireeye.commonitoring | Not in the scope | 2026-11-14 |
| sonarqube.sre.apps.fireeye.comtools | Not in the scope | 2026-11-14 |
| teamcity.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| try.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| dnstest-drone.try.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| duo.try.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| httpserver.try.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| infra-drone.try.sre.apps.fireeye.comci | Not in the scope | 2026-11-14 |
| whitesource.sre.apps.fireeye.com | Not in the scope | 2026-11-14 |
| staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| hapstg1.staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| hapstg2.staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| static.apps.fireeye.com | Not in the scope | 2026-11-14 |
| email.static.apps.fireeye.com | Not in the scope | 2026-11-14 |
| storytime.apps.fireeye.com | Not in the scope | 2026-11-14 |
| api.storytime.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| arb.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| dev.arb.svpc.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev2.arb.svpc.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| development.arb.svpc.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| prd.arb.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| pte.arb.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| qa.arb.svpc.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| stg.arb.svpc.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.arb.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| athena.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| dtrk.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| prd.dtrk.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| stg.dtrk.svpc.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.dtrk.svpc.apps.fireeye.com | Not in the scope | 2026-11-14 |
| tapvar.apps.fireeye.com | Not in the scope | 2026-11-14 |
| dev.tapvar.apps.fireeye.comdev | Not in the scope | 2026-11-14 |
| tapvardev.apps.fireeye.com | Not in the scope | 2026-11-14 |
| test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| telemetry.b1.test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| darwin.test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| qa.api.darwin.test02-usw2.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| www.qa.api.darwin.test02-usw2.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| dronerunner.test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| etp-airflow.test02-usw2.apps.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| etp-detection-repository.test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| telemetry.test02-usw2.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| letest2.testkub.apps.fireeye.com | Not in the scope | 2026-11-14 |
| zulu0kub-test.testkub.apps.fireeye.comtest | Not in the scope | 2026-11-14 |
| zulu0kub-test-api.testkub.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| tokenserver.apps.fireeye.com | Not in the scope | 2026-11-14 |
| prod.tokenserver.apps.fireeye.com | Not in the scope | 2026-11-14 |
| ui.apps.fireeye.com | Not in the scope | 2026-11-14 |
| stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.blue.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-admin-blue.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-admin-green.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-blue.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-green.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.federation.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.green.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| telemetry.vaan.apps.fireeye.com | Not in the scope | 2026-11-14 |
| telemetry.vaan02.apps.fireeye.com | Not in the scope | 2026-11-14 |
| arc.fireeye.com | Not in the scope | 2026-11-14 |
| www.arc.fireeye.com | Not in the scope | 2026-11-14 |
| ars.fireeye.com | Not in the scope | 2026-11-14 |
| artifactory-va.fireeye.comtools | Not in the scope | 2026-11-14 |
| ashvpn.fireeye.com | Not in the scope | 2026-11-14 |
| ati.fireeye.com | Not in the scope | 2026-11-14 |
| ati-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.ati-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.ati.fireeye.com | Not in the scope | 2026-11-14 |
| ati3.fireeye.com | Not in the scope | 2026-11-14 |
| atiapi-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| auth.fireeye.comauth | Not in the scope | 2026-11-14 |
| auth-dev.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| auth-dev1.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| auth-dev63.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| auth-prod.fireeye.comauth | Not in the scope | 2026-11-14 |
| www.auth-prod.fireeye.comauth | Not in the scope | 2026-11-14 |
| auth-prod61.fireeye.comauth | Not in the scope | 2026-11-14 |
| www.auth-prod61.fireeye.comauth | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.