Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
iconnect.glb.fireeye.comNot in the scope2026-11-14
owa.glb.fireeye.commailNot in the scope2026-11-14
owaex.glb.fireeye.comNot in the scope2026-11-14
paul.glb.fireeye.comNot in the scope2026-11-14
sfb-global.glb.fireeye.comNot in the scope2026-11-14
ss.glb.fireeye.comNot in the scope2026-11-14
sts.glb.fireeye.comNot in the scope2026-11-14
vochat.glb.fireeye.comNot in the scope2026-11-14
www.vochat.glb.fireeye.comNot in the scope2026-11-14
zabx.glb.fireeye.comNot in the scope2026-11-14
global.fireeye.comNot in the scope2026-11-14
goengage.fireeye.comNot in the scope2026-11-14
goengage-dr.fireeye.comNot in the scope2026-11-14
goengage-test.fireeye.comtestNot in the scope2026-11-14
www.goengage-test.fireeye.comtestNot in the scope2026-11-14
www.goengage.fireeye.comNot in the scope2026-11-14
healthcheck.fireeye.comNot in the scope2026-11-14
www.healthcheck.fireeye.comNot in the scope2026-11-14
hermes.fireeye.comNot in the scope2026-11-14
heyligenpps.fireeye.comNot in the scope2026-11-14
horizon.fireeye.comvpnNot in the scope2026-11-14
api.horizon.fireeye.comapi, vpnNot in the scope2026-11-14
api-dev.horizon.fireeye.comapi, dev, vpnNot in the scope2026-11-14
dev.horizon.fireeye.comdev, vpnNot in the scope2026-11-14
hx-pilot.fireeye.comNot in the scope2026-11-14
hxd.fireeye.comNot in the scope2026-11-14
iad-vpn.fireeye.comvpnNot in the scope2026-11-14
iad1-csco01.fireeye.comNot in the scope2026-11-14
iad1-csco01-stage.fireeye.comstagingNot in the scope2026-11-14
www.iad1-csco01-stage.fireeye.comstagingNot in the scope2026-11-14
www.iad1-csco01.fireeye.comNot in the scope2026-11-14
ibcm.fireeye.comNot in the scope2026-11-14
iconnect.fireeye.comNot in the scope2026-11-14
identity.fireeye.comauthNot in the scope2026-11-14
www.identity.fireeye.comauthNot in the scope2026-11-14
idp.fireeye.comauthNot in the scope2026-11-14
idp-iam-int.fireeye.comauthNot in the scope2026-11-14
idp-iam-stg.fireeye.comauth, stagingNot in the scope2026-11-14
www.idp.fireeye.comauthNot in the scope2026-11-14
ignite.fireeye.comNot in the scope2026-11-14
illuminator.fireeye.comNot in the scope2026-11-14
www.illuminator.fireeye.comNot in the scope2026-11-14
sjc1-duoprxy01.infosec.fireeye.comNot in the scope2026-11-14
intelcontext.fireeye.comNot in the scope2026-11-14
intelligence.fireeye.comNot in the scope2026-11-14
intelligence-dev.fireeye.comdevNot in the scope2026-11-14
api.intelligence.fireeye.comapiNot in the scope2026-11-14
api-dev.intelligence.fireeye.comapi, devNot in the scope2026-11-14
api-qa.intelligence.fireeye.comapi, testNot in the scope2026-11-14
api-staging.intelligence.fireeye.comapi, stagingNot in the scope2026-11-14
www.api-staging.intelligence.fireeye.comapi, stagingNot in the scope2026-11-14
www.api.intelligence.fireeye.comapiNot in the scope2026-11-14
bus.intelligence.fireeye.comNot in the scope2026-11-14
bus-staging.intelligence.fireeye.comstagingNot in the scope2026-11-14
www.bus.intelligence.fireeye.comNot in the scope2026-11-14
staging.intelligence.fireeye.comstagingNot in the scope2026-11-14
www.staging.intelligence.fireeye.comstagingNot in the scope2026-11-14
tor.intelligence.fireeye.comNot in the scope2026-11-14
tor-staging.intelligence.fireeye.comstagingNot in the scope2026-11-14
www.intelligence.fireeye.comNot in the scope2026-11-14
internal.fireeye.cominternalNot in the scope2026-11-14
internal-www.fireeye.cominternalNot in the scope2026-11-14
apps.internal.fireeye.cominternalNot in the scope2026-11-14
uat.internal.fireeye.cominternal, testNot in the scope2026-11-14
apps.uat.internal.fireeye.cominternal, testNot in the scope2026-11-14
intranet.fireeye.cominternalNot in the scope2026-11-14
www.intranet.fireeye.cominternalNot in the scope2026-11-14
inventory.fireeye.comNot in the scope2026-11-14
investors.fireeye.comNot in the scope2026-11-14
invotas-stage63.fireeye.comstagingNot in the scope2026-11-14
invotasdev.fireeye.comNot in the scope2026-11-14
www.invotasdev.fireeye.comNot in the scope2026-11-14
invsvc.fireeye.comNot in the scope2026-11-14
isight-stage63.fireeye.comstagingNot in the scope2026-11-14
itsm-dev.iss.fireeye.comdevNot in the scope2026-11-14
itsm-qa.iss.fireeye.comtestNot in the scope2026-11-14
issrepo.fireeye.comNot in the scope2026-11-14
jira.fireeye.comtoolsNot in the scope2026-11-14
jss.fireeye.comNot in the scope2026-11-14
www.jss.fireeye.comNot in the scope2026-11-14
jtest2b.fireeye.comNot in the scope2026-11-14
jtest2c.fireeye.comNot in the scope2026-11-14
jtest2d.fireeye.comNot in the scope2026-11-14
keygen.fireeye.comNot in the scope2026-11-14
keygen-stage.fireeye.comstagingNot in the scope2026-11-14
www.keygen.fireeye.comNot in the scope2026-11-14
keys.fireeye.comNot in the scope2026-11-14
api.kops.fireeye.comapiNot in the scope2026-11-14
kronos.fireeye.comNot in the scope2026-11-14
lab-vpn.fireeye.comvpnNot in the scope2026-11-14
helix.ldap.fireeye.comNot in the scope2026-11-14
learn.fireeye.comNot in the scope2026-11-14
learning.fireeye.comNot in the scope2026-11-14
legacy.fireeye.comlegacyNot in the scope2026-11-14
licenseserv.fireeye.comNot in the scope2026-11-14
lifecare.fireeye.comNot in the scope2026-11-14
www.lifecare.fireeye.comNot in the scope2026-11-14
limelight.fireeye.comNot in the scope2026-11-14
limelight1.fireeye.comNot in the scope2026-11-14
lvs-febuilds.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.