Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| iconnect.glb.fireeye.com | Not in the scope | 2026-11-14 |
| owa.glb.fireeye.commail | Not in the scope | 2026-11-14 |
| owaex.glb.fireeye.com | Not in the scope | 2026-11-14 |
| paul.glb.fireeye.com | Not in the scope | 2026-11-14 |
| sfb-global.glb.fireeye.com | Not in the scope | 2026-11-14 |
| ss.glb.fireeye.com | Not in the scope | 2026-11-14 |
| sts.glb.fireeye.com | Not in the scope | 2026-11-14 |
| vochat.glb.fireeye.com | Not in the scope | 2026-11-14 |
| www.vochat.glb.fireeye.com | Not in the scope | 2026-11-14 |
| zabx.glb.fireeye.com | Not in the scope | 2026-11-14 |
| global.fireeye.com | Not in the scope | 2026-11-14 |
| goengage.fireeye.com | Not in the scope | 2026-11-14 |
| goengage-dr.fireeye.com | Not in the scope | 2026-11-14 |
| goengage-test.fireeye.comtest | Not in the scope | 2026-11-14 |
| www.goengage-test.fireeye.comtest | Not in the scope | 2026-11-14 |
| www.goengage.fireeye.com | Not in the scope | 2026-11-14 |
| healthcheck.fireeye.com | Not in the scope | 2026-11-14 |
| www.healthcheck.fireeye.com | Not in the scope | 2026-11-14 |
| hermes.fireeye.com | Not in the scope | 2026-11-14 |
| heyligenpps.fireeye.com | Not in the scope | 2026-11-14 |
| horizon.fireeye.comvpn | Not in the scope | 2026-11-14 |
| api.horizon.fireeye.comapi, vpn | Not in the scope | 2026-11-14 |
| api-dev.horizon.fireeye.comapi, dev, vpn | Not in the scope | 2026-11-14 |
| dev.horizon.fireeye.comdev, vpn | Not in the scope | 2026-11-14 |
| hx-pilot.fireeye.com | Not in the scope | 2026-11-14 |
| hxd.fireeye.com | Not in the scope | 2026-11-14 |
| iad-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| iad1-csco01.fireeye.com | Not in the scope | 2026-11-14 |
| iad1-csco01-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.iad1-csco01-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.iad1-csco01.fireeye.com | Not in the scope | 2026-11-14 |
| ibcm.fireeye.com | Not in the scope | 2026-11-14 |
| iconnect.fireeye.com | Not in the scope | 2026-11-14 |
| identity.fireeye.comauth | Not in the scope | 2026-11-14 |
| www.identity.fireeye.comauth | Not in the scope | 2026-11-14 |
| idp.fireeye.comauth | Not in the scope | 2026-11-14 |
| idp-iam-int.fireeye.comauth | Not in the scope | 2026-11-14 |
| idp-iam-stg.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| www.idp.fireeye.comauth | Not in the scope | 2026-11-14 |
| ignite.fireeye.com | Not in the scope | 2026-11-14 |
| illuminator.fireeye.com | Not in the scope | 2026-11-14 |
| www.illuminator.fireeye.com | Not in the scope | 2026-11-14 |
| sjc1-duoprxy01.infosec.fireeye.com | Not in the scope | 2026-11-14 |
| intelcontext.fireeye.com | Not in the scope | 2026-11-14 |
| intelligence.fireeye.com | Not in the scope | 2026-11-14 |
| intelligence-dev.fireeye.comdev | Not in the scope | 2026-11-14 |
| api.intelligence.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-dev.intelligence.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| api-qa.intelligence.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api-staging.intelligence.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| www.api-staging.intelligence.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| www.api.intelligence.fireeye.comapi | Not in the scope | 2026-11-14 |
| bus.intelligence.fireeye.com | Not in the scope | 2026-11-14 |
| bus-staging.intelligence.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.bus.intelligence.fireeye.com | Not in the scope | 2026-11-14 |
| staging.intelligence.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.staging.intelligence.fireeye.comstaging | Not in the scope | 2026-11-14 |
| tor.intelligence.fireeye.com | Not in the scope | 2026-11-14 |
| tor-staging.intelligence.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.intelligence.fireeye.com | Not in the scope | 2026-11-14 |
| internal.fireeye.cominternal | Not in the scope | 2026-11-14 |
| internal-www.fireeye.cominternal | Not in the scope | 2026-11-14 |
| apps.internal.fireeye.cominternal | Not in the scope | 2026-11-14 |
| uat.internal.fireeye.cominternal, test | Not in the scope | 2026-11-14 |
| apps.uat.internal.fireeye.cominternal, test | Not in the scope | 2026-11-14 |
| intranet.fireeye.cominternal | Not in the scope | 2026-11-14 |
| www.intranet.fireeye.cominternal | Not in the scope | 2026-11-14 |
| inventory.fireeye.com | Not in the scope | 2026-11-14 |
| investors.fireeye.com | Not in the scope | 2026-11-14 |
| invotas-stage63.fireeye.comstaging | Not in the scope | 2026-11-14 |
| invotasdev.fireeye.com | Not in the scope | 2026-11-14 |
| www.invotasdev.fireeye.com | Not in the scope | 2026-11-14 |
| invsvc.fireeye.com | Not in the scope | 2026-11-14 |
| isight-stage63.fireeye.comstaging | Not in the scope | 2026-11-14 |
| itsm-dev.iss.fireeye.comdev | Not in the scope | 2026-11-14 |
| itsm-qa.iss.fireeye.comtest | Not in the scope | 2026-11-14 |
| issrepo.fireeye.com | Not in the scope | 2026-11-14 |
| jira.fireeye.comtools | Not in the scope | 2026-11-14 |
| jss.fireeye.com | Not in the scope | 2026-11-14 |
| www.jss.fireeye.com | Not in the scope | 2026-11-14 |
| jtest2b.fireeye.com | Not in the scope | 2026-11-14 |
| jtest2c.fireeye.com | Not in the scope | 2026-11-14 |
| jtest2d.fireeye.com | Not in the scope | 2026-11-14 |
| keygen.fireeye.com | Not in the scope | 2026-11-14 |
| keygen-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.keygen.fireeye.com | Not in the scope | 2026-11-14 |
| keys.fireeye.com | Not in the scope | 2026-11-14 |
| api.kops.fireeye.comapi | Not in the scope | 2026-11-14 |
| kronos.fireeye.com | Not in the scope | 2026-11-14 |
| lab-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| helix.ldap.fireeye.com | Not in the scope | 2026-11-14 |
| learn.fireeye.com | Not in the scope | 2026-11-14 |
| learning.fireeye.com | Not in the scope | 2026-11-14 |
| legacy.fireeye.comlegacy | Not in the scope | 2026-11-14 |
| licenseserv.fireeye.com | Not in the scope | 2026-11-14 |
| lifecare.fireeye.com | Not in the scope | 2026-11-14 |
| www.lifecare.fireeye.com | Not in the scope | 2026-11-14 |
| limelight.fireeye.com | Not in the scope | 2026-11-14 |
| limelight1.fireeye.com | Not in the scope | 2026-11-14 |
| lvs-febuilds.fireeye.com | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.