Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
auth-prod63.fireeye.comauthNot in the scope2026-11-14
www.auth-prod63.fireeye.comauthNot in the scope2026-11-14
auth-prod65.fireeye.comauthNot in the scope2026-11-14
auth-qa.fireeye.comauth, testNot in the scope2026-11-14
auth-stage.fireeye.comauth, stagingNot in the scope2026-11-14
www.auth-stage.fireeye.comauth, stagingNot in the scope2026-11-14
auth-stage65.fireeye.comauth, stagingNot in the scope2026-11-14
auth-staging.fireeye.comauth, stagingNot in the scope2026-11-14
www.auth-staging.fireeye.comauth, stagingNot in the scope2026-11-14
autodiscover.fireeye.commailNot in the scope2026-11-14
av.fireeye.comNot in the scope2026-11-14
avsuite.fireeye.comNot in the scope2026-11-14
avsuite-qa.fireeye.comtestNot in the scope2026-11-14
www.avsuite-qa.fireeye.comtestNot in the scope2026-11-14
avupdate.fireeye.comNot in the scope2026-11-14
aware.fireeye.comNot in the scope2026-11-14
www.aware.fireeye.comNot in the scope2026-11-14
benefits.fireeye.comNot in the scope2026-11-14
benefitscenter.fireeye.comNot in the scope2026-11-14
www.benefitscenter.fireeye.comNot in the scope2026-11-14
betacloud.fireeye.comNot in the scope2026-11-14
binocolo.fireeye.comNot in the scope2026-11-14
binocolo-dev.fireeye.comdevNot in the scope2026-11-14
binocolo-qa.fireeye.comtestNot in the scope2026-11-14
binocolo3.fireeye.comNot in the scope2026-11-14
www.binocolo3.fireeye.comNot in the scope2026-11-14
bitlocker.fireeye.comNot in the scope2026-11-14
www.bitlocker.fireeye.comNot in the scope2026-11-14
blog.fireeye.comNot in the scope2026-11-14
blogprod.fireeye.comNot in the scope2026-11-14
blogstage.fireeye.comNot in the scope2026-11-14
blr-vpn.fireeye.comvpnNot in the scope2026-11-14
blrrubrikc01.fireeye.comNot in the scope2026-11-14
www.blrrubrikc01.fireeye.comNot in the scope2026-11-14
bmw-fedit.fireeye.comNot in the scope2026-11-14
www.bmw-fedit.fireeye.comNot in the scope2026-11-14
bmw-fesit.fireeye.comNot in the scope2026-11-14
www.bmw-fesit.fireeye.comNot in the scope2026-11-14
bmw-prod.fireeye.comNot in the scope2026-11-14
bmw-prod-mil.fireeye.comNot in the scope2026-11-14
bmw-prod-va.fireeye.comNot in the scope2026-11-14
www.bmw-prod.fireeye.comNot in the scope2026-11-14
bmw-qa.fireeye.comtestNot in the scope2026-11-14
bmw-qa-mil.fireeye.comtestNot in the scope2026-11-14
bmw-qa-va.fireeye.comtestNot in the scope2026-11-14
www.bmw-qa.fireeye.comtestNot in the scope2026-11-14
bmw-stage.fireeye.comstagingNot in the scope2026-11-14
www.bmw-stage.fireeye.comstagingNot in the scope2026-11-14
bmw-uat.fireeye.comtestNot in the scope2026-11-14
www.bmw-uat.fireeye.comtestNot in the scope2026-11-14
bpsys.fireeye.comNot in the scope2026-11-14
www.bpsys.fireeye.comNot in the scope2026-11-14
brand.fireeye.comNot in the scope2026-11-14
brand63.fireeye.comNot in the scope2026-11-14
bugs.fireeye.comNot in the scope2026-11-14
byod.fireeye.comNot in the scope2026-11-14
ca.fireeye.comNot in the scope2026-11-14
api.ca.fireeye.comapiNot in the scope2026-11-14
api-docs.ca.fireeye.comapiNot in the scope2026-11-14
console.ca.fireeye.comadminNot in the scope2026-11-14
etp.ca.fireeye.comNot in the scope2026-11-14
idp.ca.fireeye.comauthNot in the scope2026-11-14
notification.ca.fireeye.comNot in the scope2026-11-14
schema.ca.fireeye.comNot in the scope2026-11-14
cab.fireeye.comNot in the scope2026-11-14
casarray.fireeye.comNot in the scope2026-11-14
casarray-va.fireeye.comNot in the scope2026-11-14
www.casarray.fireeye.comNot in the scope2026-11-14
cbcm.fireeye.comNot in the scope2026-11-14
www.cbcm.fireeye.comNot in the scope2026-11-14
ccc-portal.fireeye.comNot in the scope2026-11-14
cgen3.fireeye.comNot in the scope2026-11-14
chat.fireeye.comNot in the scope2026-11-14
chpwd.fireeye.comNot in the scope2026-11-14
cloud.fireeye.comNot in the scope2026-11-14
cloud-fcs.fireeye.comNot in the scope2026-11-14
cloud-preprod.fireeye.comstagingNot in the scope2026-11-14
www.cloud-preprod.fireeye.comstagingNot in the scope2026-11-14
cloud-qa2.fireeye.comNot in the scope2026-11-14
cloud-stage.fireeye.comstagingNot in the scope2026-11-14
www.cloud-stage.fireeye.comstagingNot in the scope2026-11-14
cloud-test.fireeye.comtestNot in the scope2026-11-14
api.cloud.fireeye.comapiNot in the scope2026-11-14
console.cloud.fireeye.comadminNot in the scope2026-11-14
docs.cloud.fireeye.comNot in the scope2026-11-14
federation.cloud.fireeye.comNot in the scope2026-11-14
idp.cloud.fireeye.comauthNot in the scope2026-11-14
notifications.cloud.fireeye.comNot in the scope2026-11-14
schemas.cloud.fireeye.comNot in the scope2026-11-14
sso.cloud.fireeye.comauthNot in the scope2026-11-14
cloud01.fireeye.comNot in the scope2026-11-14
cloud03.fireeye.comNot in the scope2026-11-14
cloud6.fireeye.comNot in the scope2026-11-14
cloud6-qa2.fireeye.comNot in the scope2026-11-14
cloudcolo.fireeye.comNot in the scope2026-11-14
cloudservices.fireeye.comNot in the scope2026-11-14
cloudservices-sandbox.fireeye.comtestNot in the scope2026-11-14
www.cloudservices.fireeye.comNot in the scope2026-11-14
cloudtest.fireeye.comNot in the scope2026-11-14
cofense.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.