Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| api-neptune.datalake.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-neptune-qa.datalake.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api-neptune-stage.datalake.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| dc-005b37c400b2.fireeye.com | Not in the scope | 2026-11-14 |
| dc-813f17c3fbd1.fireeye.com | Not in the scope | 2026-11-14 |
| dc-a6b9a0c3c6b2.fireeye.com | Not in the scope | 2026-11-14 |
| dc-d12de98dc1a0.fireeye.com | Not in the scope | 2026-11-14 |
| dc-f6b3c5250f9b.fireeye.com | Not in the scope | 2026-11-14 |
| design.fireeye.com | Not in the scope | 2026-11-14 |
| docs-portal.design.fireeye.com | Not in the scope | 2026-11-14 |
| odyssey.design.fireeye.com | Not in the scope | 2026-11-14 |
| cdn-prod.odyssey.design.fireeye.com | Not in the scope | 2026-11-14 |
| dev.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-docs.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-erp-app.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-identity.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| dev-idp.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| www.dev-idp.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| dev-learn.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-timetracker.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev-unifiedid.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.dev-unifiedid.fireeye.comdev | Not in the scope | 2026-11-14 |
| registry.dev.fireeye.comdev, tools | Not in the scope | 2026-11-14 |
| dev1.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev1-identity.fireeye.comauth, dev | Not in the scope | 2026-11-14 |
| dev63.fireeye.comdev | Not in the scope | 2026-11-14 |
| developer.fireeye.com | Not in the scope | 2026-11-14 |
| developers.fireeye.com | Not in the scope | 2026-11-14 |
| dialin.fireeye.com | Not in the scope | 2026-11-14 |
| dispatcher1.fireeye.com | Not in the scope | 2026-11-14 |
| dispatcher2.fireeye.com | Not in the scope | 2026-11-14 |
| docs.fireeye.com | Not in the scope | 2026-11-14 |
| docs-iam-int.fireeye.comauth | Not in the scope | 2026-11-14 |
| docs-iam-stg.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| dev.docs.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.docs.fireeye.com | Not in the scope | 2026-11-14 |
| docs2.fireeye.com | Not in the scope | 2026-11-14 |
| dod.fireeye.com | Not in the scope | 2026-11-14 |
| download.fireeye.com | Not in the scope | 2026-11-14 |
| download-beta.fireeye.comstaging | Not in the scope | 2026-11-14 |
| download-qa.fireeye.comtest | Not in the scope | 2026-11-14 |
| download-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| download-staging.fireeye.comstaging | Not in the scope | 2026-11-14 |
| download6-qa.fireeye.comtest | Not in the scope | 2026-11-14 |
| dpany-pc.fireeye.com | Not in the scope | 2026-11-14 |
| drop.fireeye.com | Not in the scope | 2026-11-14 |
| www.drop.fireeye.com | Not in the scope | 2026-11-14 |
| dtitap.fireeye.com | Not in the scope | 2026-11-14 |
| dtitap-prod.fireeye.com | Not in the scope | 2026-11-14 |
| dtitap-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| duong.fireeye.com | Not in the scope | 2026-11-14 |
| dx-components.fireeye.com | Not in the scope | 2026-11-14 |
| eastcoastcas.fireeye.com | Not in the scope | 2026-11-14 |
| education.fireeye.com | Not in the scope | 2026-11-14 |
| edulabs.fireeye.com | Not in the scope | 2026-11-14 |
| selab.emea.fireeye.com | Not in the scope | 2026-11-14 |
| emerginged.fireeye.com | Not in the scope | 2026-11-14 |
| afoley.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| ahmaden.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| alpha.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| alpha01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| alpha02.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| amir.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| andreis.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| apollo.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| atlas.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| beta01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| ciaranwhyte.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| dcsibi.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| dev-vineela.endpoint.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev01.endpoint.fireeye.comdev | Not in the scope | 2026-11-14 |
| dev02.endpoint.fireeye.comdev | Not in the scope | 2026-11-14 |
| devahmadglobal.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devaishwaryadeviap.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devambarish.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devaswin.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devbart.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devbrajkishor.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devglobalsatya.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devhiman.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devivanbachabi.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devkeithw.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devkeithwonderly.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devkshaw.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devops.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devprashanth.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devriti.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devritika.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devritz.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devsanthosh.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devsathish.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devshashanka.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devsiddharthb.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devsivaramsajeev.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devsteffey.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devui.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devvijay.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devvikaskumar.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devvsevolods.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| devvsevolodse1.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.