Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
agentcomms.docs.endpoint.fireeye.comNot in the scope2026-11-14
asdf.docs.endpoint.fireeye.comNot in the scope2026-11-14
cdk-constructs.docs.endpoint.fireeye.comNot in the scope2026-11-14
cdk-constructs1.docs.endpoint.fireeye.comNot in the scope2026-11-14
cdk-constructs2.docs.endpoint.fireeye.comNot in the scope2026-11-14
cdk-constructs3.docs.endpoint.fireeye.comNot in the scope2026-11-14
containment-api.docs.endpoint.fireeye.comapiNot in the scope2026-11-14
endpoint-schemas.docs.endpoint.fireeye.comNot in the scope2026-11-14
fesops.docs.endpoint.fireeye.comNot in the scope2026-11-14
hostmgmt.docs.endpoint.fireeye.comNot in the scope2026-11-14
malware-scans.docs.endpoint.fireeye.comNot in the scope2026-11-14
policy.docs.endpoint.fireeye.comNot in the scope2026-11-14
quarantines.docs.endpoint.fireeye.comNot in the scope2026-11-14
tabca-sdk.docs.endpoint.fireeye.comNot in the scope2026-11-14
tabca-sdk-node.docs.endpoint.fireeye.comNot in the scope2026-11-14
tasking.docs.endpoint.fireeye.comNot in the scope2026-11-14
v3-0.docs.endpoint.fireeye.comNot in the scope2026-11-14
env-alpha-ohio-1.endpoint.fireeye.comstagingNot in the scope2026-11-14
env-alpha-ohio-2.endpoint.fireeye.comstagingNot in the scope2026-11-14
env-alpha-ohio-3.endpoint.fireeye.comstagingNot in the scope2026-11-14
env-alpha-vir-1.endpoint.fireeye.comstagingNot in the scope2026-11-14
gamma01.endpoint.fireeye.comNot in the scope2026-11-14
gamma02.endpoint.fireeye.comNot in the scope2026-11-14
gcc.endpoint.fireeye.comNot in the scope2026-11-14
global-alpha.endpoint.fireeye.comstagingNot in the scope2026-11-14
global-beta.endpoint.fireeye.comstagingNot in the scope2026-11-14
global-dev.endpoint.fireeye.comdevNot in the scope2026-11-14
global-gamma.endpoint.fireeye.comNot in the scope2026-11-14
global-prod.endpoint.fireeye.comNot in the scope2026-11-14
global-sandbox.endpoint.fireeye.comtestNot in the scope2026-11-14
global-stable.endpoint.fireeye.comNot in the scope2026-11-14
global-test.endpoint.fireeye.comtestNot in the scope2026-11-14
i-beta01.endpoint.fireeye.comstagingNot in the scope2026-11-14
i-beta02.endpoint.fireeye.comstagingNot in the scope2026-11-14
i-devops.endpoint.fireeye.comNot in the scope2026-11-14
i-devops-beta.endpoint.fireeye.comstagingNot in the scope2026-11-14
i-pioneers.endpoint.fireeye.comNot in the scope2026-11-14
i-symphony.endpoint.fireeye.comNot in the scope2026-11-14
i-tabca.endpoint.fireeye.comNot in the scope2026-11-14
i-tabca2.endpoint.fireeye.comNot in the scope2026-11-14
performance.endpoint.fireeye.comNot in the scope2026-11-14
pioneer01.endpoint.fireeye.comNot in the scope2026-11-14
pioneers.endpoint.fireeye.comNot in the scope2026-11-14
pipeline.endpoint.fireeye.comNot in the scope2026-11-14
pipelinx.endpoint.fireeye.comNot in the scope2026-11-14
prod01.endpoint.fireeye.comNot in the scope2026-11-14
qa.endpoint.fireeye.comtestNot in the scope2026-11-14
qans01.endpoint.fireeye.comNot in the scope2026-11-14
quality.endpoint.fireeye.comNot in the scope2026-11-14
quality01.endpoint.fireeye.comNot in the scope2026-11-14
rainmakers.endpoint.fireeye.comNot in the scope2026-11-14
edr-tasking.rainmakers.endpoint.fireeye.comNot in the scope2026-11-14
scripts.rainmakers.endpoint.fireeye.comNot in the scope2026-11-14
tasker.rainmakers.endpoint.fireeye.comNot in the scope2026-11-14
sandbox.endpoint.fireeye.comtestNot in the scope2026-11-14
satya.endpoint.fireeye.comNot in the scope2026-11-14
stable01.endpoint.fireeye.comNot in the scope2026-11-14
symphony.endpoint.fireeye.comNot in the scope2026-11-14
test01.endpoint.fireeye.comtestNot in the scope2026-11-14
timber01.endpoint.fireeye.comNot in the scope2026-11-14
eng.fireeye.comNot in the scope2026-11-14
artifactory.eng.fireeye.comtoolsNot in the scope2026-11-14
artifactory-va.eng.fireeye.comtoolsNot in the scope2026-11-14
www.artifactory-va.eng.fireeye.comtoolsNot in the scope2026-11-14
docker-dev.artifactory.eng.fireeye.comdev, toolsNot in the scope2026-11-14
docker-helix.artifactory.eng.fireeye.comtoolsNot in the scope2026-11-14
docker-prod.artifactory.eng.fireeye.comtoolsNot in the scope2026-11-14
docker-test.artifactory.eng.fireeye.comtest, toolsNot in the scope2026-11-14
io-container.artifactory.eng.fireeye.comtoolsNot in the scope2026-11-14
www.artifactory.eng.fireeye.comtoolsNot in the scope2026-11-14
ax-scqa-auto-hq-01.eng.fireeye.comNot in the scope2026-11-14
www.ax-scqa-auto-hq-01.eng.fireeye.comNot in the scope2026-11-14
babylon.eng.fireeye.comNot in the scope2026-11-14
www.babylon.eng.fireeye.comNot in the scope2026-11-14
bang-engvpn-asa.eng.fireeye.comNot in the scope2026-11-14
baryon.eng.fireeye.comNot in the scope2026-11-14
www.baryon.eng.fireeye.comNot in the scope2026-11-14
bugsy.eng.fireeye.comNot in the scope2026-11-14
build-cloud.eng.fireeye.comciNot in the scope2026-11-14
www.build-cloud.eng.fireeye.comciNot in the scope2026-11-14
builds.eng.fireeye.comciNot in the scope2026-11-14
builds-blr.eng.fireeye.comciNot in the scope2026-11-14
www.builds-blr.eng.fireeye.comciNot in the scope2026-11-14
www.builds.eng.fireeye.comciNot in the scope2026-11-14
ci-jenkins-master.eng.fireeye.comciNot in the scope2026-11-14
www.ci-jenkins-master.eng.fireeye.comciNot in the scope2026-11-14
cloud-images.eng.fireeye.comNot in the scope2026-11-14
coverity.eng.fireeye.comNot in the scope2026-11-14
www.coverity.eng.fireeye.comNot in the scope2026-11-14
doc.eng.fireeye.comNot in the scope2026-11-14
docker-dev.eng.fireeye.comdev, toolsNot in the scope2026-11-14
docs.eng.fireeye.comNot in the scope2026-11-14
www.docs.eng.fireeye.comNot in the scope2026-11-14
dryfire.eng.fireeye.comNot in the scope2026-11-14
www.dryfire.eng.fireeye.comNot in the scope2026-11-14
dtibeta.eng.fireeye.comNot in the scope2026-11-14
dtidev.eng.fireeye.comNot in the scope2026-11-14
www.dtidev.eng.fireeye.comNot in the scope2026-11-14
dtiqa.eng.fireeye.comNot in the scope2026-11-14
www.dtiqa.eng.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.