Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| agentcomms.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| asdf.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| cdk-constructs.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| cdk-constructs1.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| cdk-constructs2.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| cdk-constructs3.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| containment-api.docs.endpoint.fireeye.comapi | Not in the scope | 2026-11-14 |
| endpoint-schemas.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| fesops.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| hostmgmt.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| malware-scans.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| policy.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| quarantines.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| tabca-sdk.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| tabca-sdk-node.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| tasking.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| v3-0.docs.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| env-alpha-ohio-1.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-ohio-2.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-ohio-3.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-vir-1.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| gamma01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| gamma02.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| gcc.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| global-alpha.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| global-beta.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| global-dev.endpoint.fireeye.comdev | Not in the scope | 2026-11-14 |
| global-gamma.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| global-prod.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| global-sandbox.endpoint.fireeye.comtest | Not in the scope | 2026-11-14 |
| global-stable.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| global-test.endpoint.fireeye.comtest | Not in the scope | 2026-11-14 |
| i-beta01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-beta02.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-devops.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| i-devops-beta.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-pioneers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| i-symphony.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| i-tabca.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| i-tabca2.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| performance.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| pioneer01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| pioneers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| pipeline.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| pipelinx.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| prod01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| qa.endpoint.fireeye.comtest | Not in the scope | 2026-11-14 |
| qans01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| quality.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| quality01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| rainmakers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| edr-tasking.rainmakers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| scripts.rainmakers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| tasker.rainmakers.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| sandbox.endpoint.fireeye.comtest | Not in the scope | 2026-11-14 |
| satya.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| stable01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| symphony.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| test01.endpoint.fireeye.comtest | Not in the scope | 2026-11-14 |
| timber01.endpoint.fireeye.com | Not in the scope | 2026-11-14 |
| eng.fireeye.com | Not in the scope | 2026-11-14 |
| artifactory.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| artifactory-va.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| www.artifactory-va.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| docker-dev.artifactory.eng.fireeye.comdev, tools | Not in the scope | 2026-11-14 |
| docker-helix.artifactory.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| docker-prod.artifactory.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| docker-test.artifactory.eng.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| io-container.artifactory.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| www.artifactory.eng.fireeye.comtools | Not in the scope | 2026-11-14 |
| ax-scqa-auto-hq-01.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.ax-scqa-auto-hq-01.eng.fireeye.com | Not in the scope | 2026-11-14 |
| babylon.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.babylon.eng.fireeye.com | Not in the scope | 2026-11-14 |
| bang-engvpn-asa.eng.fireeye.com | Not in the scope | 2026-11-14 |
| baryon.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.baryon.eng.fireeye.com | Not in the scope | 2026-11-14 |
| bugsy.eng.fireeye.com | Not in the scope | 2026-11-14 |
| build-cloud.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| www.build-cloud.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| builds.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| builds-blr.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| www.builds-blr.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| www.builds.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| ci-jenkins-master.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| www.ci-jenkins-master.eng.fireeye.comci | Not in the scope | 2026-11-14 |
| cloud-images.eng.fireeye.com | Not in the scope | 2026-11-14 |
| coverity.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.coverity.eng.fireeye.com | Not in the scope | 2026-11-14 |
| doc.eng.fireeye.com | Not in the scope | 2026-11-14 |
| docker-dev.eng.fireeye.comdev, tools | Not in the scope | 2026-11-14 |
| docs.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.docs.eng.fireeye.com | Not in the scope | 2026-11-14 |
| dryfire.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.dryfire.eng.fireeye.com | Not in the scope | 2026-11-14 |
| dtibeta.eng.fireeye.com | Not in the scope | 2026-11-14 |
| dtidev.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.dtidev.eng.fireeye.com | Not in the scope | 2026-11-14 |
| dtiqa.eng.fireeye.com | Not in the scope | 2026-11-14 |
| www.dtiqa.eng.fireeye.com | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.