Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information DisclosureAnalysed#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| myapp.fireeye.com | Not in the scope | 2026-11-14 |
| myapp1.fireeye.com | Not in the scope | 2026-11-14 |
| myapp2.fireeye.com | Not in the scope | 2026-11-14 |
| myappva.fireeye.com | Not in the scope | 2026-11-14 |
| myemail.fireeye.com | Not in the scope | 2026-11-14 |
| myemail1.fireeye.com | Not in the scope | 2026-11-14 |
| myemail2.fireeye.com | Not in the scope | 2026-11-14 |
| myemailva.fireeye.com | Not in the scope | 2026-11-14 |
| mymobile.fireeye.com | Not in the scope | 2026-11-14 |
| www.mymobile.fireeye.com | Not in the scope | 2026-11-14 |
| mymsm.fireeye.com | Not in the scope | 2026-11-14 |
| mymtp.fireeye.com | Not in the scope | 2026-11-14 |
| irresistiblemessage.respond.ontraport.n.fireeye.com | Not in the scope | 2026-11-14 |
| nitrogen.fireeye.com | Not in the scope | 2026-11-14 |
| nl1-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| nl1-vpn-001.fireeye.comvpn | Not in the scope | 2026-11-14 |
| notifications-iam-int.fireeye.comauth | Not in the scope | 2026-11-14 |
| notifications-iam-stg.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| npulse-license.fireeye.com | Not in the scope | 2026-11-14 |
| www.npulse-license.fireeye.com | Not in the scope | 2026-11-14 |
| o365.fireeye.com | Not in the scope | 2026-11-14 |
| oag.fireeye.com | Not in the scope | 2026-11-14 |
| oag-dev.fireeye.comdev | Not in the scope | 2026-11-14 |
| www.oag-dev.fireeye.comdev | Not in the scope | 2026-11-14 |
| oag-prod.fireeye.com | Not in the scope | 2026-11-14 |
| www.oag-prod.fireeye.com | Not in the scope | 2026-11-14 |
| oagdev.fireeye.com | Not in the scope | 2026-11-14 |
| oagprod.fireeye.com | Not in the scope | 2026-11-14 |
| obscura.fireeye.com | Not in the scope | 2026-11-14 |
| www.obscura.fireeye.com | Not in the scope | 2026-11-14 |
| offshore.fireeye.com | Not in the scope | 2026-11-14 |
| offshorevpn.fireeye.com | Not in the scope | 2026-11-14 |
| www.offshorevpn.fireeye.com | Not in the scope | 2026-11-14 |
| oken.fireeye.com | Not in the scope | 2026-11-14 |
| confluence-test.ops.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| elasticstack.ops.fireeye.com | Not in the scope | 2026-11-14 |
| elasticstack-aws-data-demo.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| elasticstack-aws-demo.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| elasticstack-data.ops.fireeye.com | Not in the scope | 2026-11-14 |
| elasticstack-data-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| elasticstack-data-test.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| elasticstack-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| elasticstack-logstash.ops.fireeye.com | Not in the scope | 2026-11-14 |
| elasticstack-logstash-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| elasticstack-logstash-test.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| elasticstack-master.ops.fireeye.com | Not in the scope | 2026-11-14 |
| elasticstack-master-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| elasticstack-master-test.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| elasticstack-test.ops.fireeye.comtest | Not in the scope | 2026-11-14 |
| jenkins.ops.fireeye.comci | Not in the scope | 2026-11-14 |
| jenkins-dev.ops.fireeye.comci, dev | Not in the scope | 2026-11-14 |
| jenkins-test.ops.fireeye.comci, test | Not in the scope | 2026-11-14 |
| jira-test.ops.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| ptrt-jira-test.ops.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| rancher-dev.ops.fireeye.comdev, tools | Not in the scope | 2026-11-14 |
| rancher-test.ops.fireeye.comtest, tools | Not in the scope | 2026-11-14 |
| terraform.ops.fireeye.com | Not in the scope | 2026-11-14 |
| terraform-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| tfe.ops.fireeye.com | Not in the scope | 2026-11-14 |
| tfe-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| tower-dev.ops.fireeye.comdev | Not in the scope | 2026-11-14 |
| origin-tfs.fireeye.com | Not in the scope | 2026-11-14 |
| origin-www.fireeye.com | Not in the scope | 2026-11-14 |
| ork-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| outlook.fireeye.com | Not in the scope | 2026-11-14 |
| owa.fireeye.commail | Not in the scope | 2026-11-14 |
| owaca.fireeye.com | Not in the scope | 2026-11-14 |
| owaex.fireeye.com | Not in the scope | 2026-11-14 |
| owapp.fireeye.com | Not in the scope | 2026-11-14 |
| owapp-inba.fireeye.com | Not in the scope | 2026-11-14 |
| owapp-irco.fireeye.com | Not in the scope | 2026-11-14 |
| owapp-sing.fireeye.com | Not in the scope | 2026-11-14 |
| owapp-usva.fireeye.com | Not in the scope | 2026-11-14 |
| www.owapp.fireeye.com | Not in the scope | 2026-11-14 |
| owava.fireeye.com | Not in the scope | 2026-11-14 |
| pages.fireeye.com | Not in the scope | 2026-11-14 |
| partnerportal.fireeye.com | Not in the scope | 2026-11-14 |
| www.partnerportal.fireeye.com | Not in the scope | 2026-11-14 |
| partnerportal63.fireeye.com | Not in the scope | 2026-11-14 |
| partners.fireeye.com | Not in the scope | 2026-11-14 |
| partners-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| www.partners-vpn.fireeye.comvpn | Not in the scope | 2026-11-14 |
| www.partners.fireeye.com | Not in the scope | 2026-11-14 |
| penguin.fireeye.com | Not in the scope | 2026-11-14 |
| www.penguin.fireeye.com | Not in the scope | 2026-11-14 |
| politemail.fireeye.com | Not in the scope | 2026-11-14 |
| politemail-read.fireeye.com | Not in the scope | 2026-11-14 |
| www.politemail.fireeye.com | Not in the scope | 2026-11-14 |
| polycom.fireeye.com | Not in the scope | 2026-11-14 |
| polycom2.fireeye.com | Not in the scope | 2026-11-14 |
| portal-dti.fireeye.com | Not in the scope | 2026-11-14 |
| portal-dti-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.portal-dti.fireeye.com | Not in the scope | 2026-11-14 |
| pov0.fireeye.com | Not in the scope | 2026-11-14 |
| pov3.fireeye.com | Not in the scope | 2026-11-14 |
| pov9.fireeye.com | Not in the scope | 2026-11-14 |
| problem.fireeye.com | Not in the scope | 2026-11-14 |
| prod.fireeye.com | Not in the scope | 2026-11-14 |
| prod63.fireeye.com | Not in the scope | 2026-11-14 |
| prod65.fireeye.com | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.