Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information DisclosureAnalysed#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
myapp.fireeye.comNot in the scope2026-11-14
myapp1.fireeye.comNot in the scope2026-11-14
myapp2.fireeye.comNot in the scope2026-11-14
myappva.fireeye.comNot in the scope2026-11-14
myemail.fireeye.comNot in the scope2026-11-14
myemail1.fireeye.comNot in the scope2026-11-14
myemail2.fireeye.comNot in the scope2026-11-14
myemailva.fireeye.comNot in the scope2026-11-14
mymobile.fireeye.comNot in the scope2026-11-14
www.mymobile.fireeye.comNot in the scope2026-11-14
mymsm.fireeye.comNot in the scope2026-11-14
mymtp.fireeye.comNot in the scope2026-11-14
irresistiblemessage.respond.ontraport.n.fireeye.comNot in the scope2026-11-14
nitrogen.fireeye.comNot in the scope2026-11-14
nl1-vpn.fireeye.comvpnNot in the scope2026-11-14
nl1-vpn-001.fireeye.comvpnNot in the scope2026-11-14
notifications-iam-int.fireeye.comauthNot in the scope2026-11-14
notifications-iam-stg.fireeye.comauth, stagingNot in the scope2026-11-14
npulse-license.fireeye.comNot in the scope2026-11-14
www.npulse-license.fireeye.comNot in the scope2026-11-14
o365.fireeye.comNot in the scope2026-11-14
oag.fireeye.comNot in the scope2026-11-14
oag-dev.fireeye.comdevNot in the scope2026-11-14
www.oag-dev.fireeye.comdevNot in the scope2026-11-14
oag-prod.fireeye.comNot in the scope2026-11-14
www.oag-prod.fireeye.comNot in the scope2026-11-14
oagdev.fireeye.comNot in the scope2026-11-14
oagprod.fireeye.comNot in the scope2026-11-14
obscura.fireeye.comNot in the scope2026-11-14
www.obscura.fireeye.comNot in the scope2026-11-14
offshore.fireeye.comNot in the scope2026-11-14
offshorevpn.fireeye.comNot in the scope2026-11-14
www.offshorevpn.fireeye.comNot in the scope2026-11-14
oken.fireeye.comNot in the scope2026-11-14
confluence-test.ops.fireeye.comtest, toolsNot in the scope2026-11-14
elasticstack.ops.fireeye.comNot in the scope2026-11-14
elasticstack-aws-data-demo.ops.fireeye.comtestNot in the scope2026-11-14
elasticstack-aws-demo.ops.fireeye.comtestNot in the scope2026-11-14
elasticstack-data.ops.fireeye.comNot in the scope2026-11-14
elasticstack-data-dev.ops.fireeye.comdevNot in the scope2026-11-14
elasticstack-data-test.ops.fireeye.comtestNot in the scope2026-11-14
elasticstack-dev.ops.fireeye.comdevNot in the scope2026-11-14
elasticstack-logstash.ops.fireeye.comNot in the scope2026-11-14
elasticstack-logstash-dev.ops.fireeye.comdevNot in the scope2026-11-14
elasticstack-logstash-test.ops.fireeye.comtestNot in the scope2026-11-14
elasticstack-master.ops.fireeye.comNot in the scope2026-11-14
elasticstack-master-dev.ops.fireeye.comdevNot in the scope2026-11-14
elasticstack-master-test.ops.fireeye.comtestNot in the scope2026-11-14
elasticstack-test.ops.fireeye.comtestNot in the scope2026-11-14
jenkins.ops.fireeye.comciNot in the scope2026-11-14
jenkins-dev.ops.fireeye.comci, devNot in the scope2026-11-14
jenkins-test.ops.fireeye.comci, testNot in the scope2026-11-14
jira-test.ops.fireeye.comtest, toolsNot in the scope2026-11-14
ptrt-jira-test.ops.fireeye.comtest, toolsNot in the scope2026-11-14
rancher-dev.ops.fireeye.comdev, toolsNot in the scope2026-11-14
rancher-test.ops.fireeye.comtest, toolsNot in the scope2026-11-14
terraform.ops.fireeye.comNot in the scope2026-11-14
terraform-dev.ops.fireeye.comdevNot in the scope2026-11-14
tfe.ops.fireeye.comNot in the scope2026-11-14
tfe-dev.ops.fireeye.comdevNot in the scope2026-11-14
tower-dev.ops.fireeye.comdevNot in the scope2026-11-14
origin-tfs.fireeye.comNot in the scope2026-11-14
origin-www.fireeye.comNot in the scope2026-11-14
ork-vpn.fireeye.comvpnNot in the scope2026-11-14
outlook.fireeye.comNot in the scope2026-11-14
owa.fireeye.commailNot in the scope2026-11-14
owaca.fireeye.comNot in the scope2026-11-14
owaex.fireeye.comNot in the scope2026-11-14
owapp.fireeye.comNot in the scope2026-11-14
owapp-inba.fireeye.comNot in the scope2026-11-14
owapp-irco.fireeye.comNot in the scope2026-11-14
owapp-sing.fireeye.comNot in the scope2026-11-14
owapp-usva.fireeye.comNot in the scope2026-11-14
www.owapp.fireeye.comNot in the scope2026-11-14
owava.fireeye.comNot in the scope2026-11-14
pages.fireeye.comNot in the scope2026-11-14
partnerportal.fireeye.comNot in the scope2026-11-14
www.partnerportal.fireeye.comNot in the scope2026-11-14
partnerportal63.fireeye.comNot in the scope2026-11-14
partners.fireeye.comNot in the scope2026-11-14
partners-vpn.fireeye.comvpnNot in the scope2026-11-14
www.partners-vpn.fireeye.comvpnNot in the scope2026-11-14
www.partners.fireeye.comNot in the scope2026-11-14
penguin.fireeye.comNot in the scope2026-11-14
www.penguin.fireeye.comNot in the scope2026-11-14
politemail.fireeye.comNot in the scope2026-11-14
politemail-read.fireeye.comNot in the scope2026-11-14
www.politemail.fireeye.comNot in the scope2026-11-14
polycom.fireeye.comNot in the scope2026-11-14
polycom2.fireeye.comNot in the scope2026-11-14
portal-dti.fireeye.comNot in the scope2026-11-14
portal-dti-stage.fireeye.comstagingNot in the scope2026-11-14
www.portal-dti.fireeye.comNot in the scope2026-11-14
pov0.fireeye.comNot in the scope2026-11-14
pov3.fireeye.comNot in the scope2026-11-14
pov9.fireeye.comNot in the scope2026-11-14
problem.fireeye.comNot in the scope2026-11-14
prod.fireeye.comNot in the scope2026-11-14
prod63.fireeye.comNot in the scope2026-11-14
prod65.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.