Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information DisclosureAnalysed#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
sfb-inba-sip.fireeye.comNot in the scope2026-11-14
sfb-inba-wc.fireeye.comNot in the scope2026-11-14
sfb-inba-webext.fireeye.comNot in the scope2026-11-14
www.sfb-inba-webext.fireeye.comNot in the scope2026-11-14
sfb-irco-av.fireeye.comNot in the scope2026-11-14
sfb-irco-pool.fireeye.comNot in the scope2026-11-14
sfb-irco-sip.fireeye.comNot in the scope2026-11-14
sfb-irco-wc.fireeye.comNot in the scope2026-11-14
sfb-irco-webext.fireeye.comNot in the scope2026-11-14
www.sfb-irco-webext.fireeye.comNot in the scope2026-11-14
sfb-irco-webint.fireeye.comNot in the scope2026-11-14
www.sfb-irco-webint.fireeye.comNot in the scope2026-11-14
sfb-meet-euap.fireeye.comNot in the scope2026-11-14
sfb-meet-inba.fireeye.comNot in the scope2026-11-14
sfb-meet-na.fireeye.comNot in the scope2026-11-14
sfb-sched.fireeye.comNot in the scope2026-11-14
sfb-sched-euap.fireeye.comNot in the scope2026-11-14
sfb-sched-inba.fireeye.comNot in the scope2026-11-14
sfb-sched-na.fireeye.comNot in the scope2026-11-14
sfb-sing-av.fireeye.comNot in the scope2026-11-14
sfb-sing-pool.fireeye.comNot in the scope2026-11-14
sfb-sing-sip.fireeye.comNot in the scope2026-11-14
sfb-sing-wc.fireeye.comNot in the scope2026-11-14
sfb-sing-webext.fireeye.comNot in the scope2026-11-14
www.sfb-sing-webext.fireeye.comNot in the scope2026-11-14
sfb-sing-webint.fireeye.comNot in the scope2026-11-14
www.sfb-sing-webint.fireeye.comNot in the scope2026-11-14
sfb-usmi-av.fireeye.comNot in the scope2026-11-14
sfb-usmi-sip.fireeye.comNot in the scope2026-11-14
sfb-usmi-wc.fireeye.comNot in the scope2026-11-14
sfb-usmi-webext.fireeye.comNot in the scope2026-11-14
sfb-usmi-webint.fireeye.comNot in the scope2026-11-14
www.sfb-usmi-webint.fireeye.comNot in the scope2026-11-14
sfb-usva-av.fireeye.comNot in the scope2026-11-14
sfb-usva-sip.fireeye.comNot in the scope2026-11-14
sfb-usva-wc.fireeye.comNot in the scope2026-11-14
sfb-usva-webext.fireeye.comNot in the scope2026-11-14
www.sfb-usva-webext.fireeye.comNot in the scope2026-11-14
sfb-usva-webint.fireeye.comNot in the scope2026-11-14
www.sfb-usva-webint.fireeye.comNot in the scope2026-11-14
sfdc.fireeye.comNot in the scope2026-11-14
www.sfdc.fireeye.comNot in the scope2026-11-14
sgp-ebc-mx.fireeye.commailNot in the scope2026-11-14
sgp-vpn.fireeye.comvpnNot in the scope2026-11-14
sin-vpn.fireeye.comvpnNot in the scope2026-11-14
sin1-b1-f38m1-vpn1.fireeye.comvpnNot in the scope2026-11-14
sip.fireeye.comNot in the scope2026-11-14
sjc-cofense01.fireeye.comNot in the scope2026-11-14
sjc-sccm-dmz01.fireeye.comNot in the scope2026-11-14
sjc-vpn.fireeye.comvpnNot in the scope2026-11-14
sjc1-b2-f1m1-pfw1.fireeye.comNot in the scope2026-11-14
sjc1-corp-nx01-ssl.fireeye.cominternalNot in the scope2026-11-14
www.sjc1-corp-nx01-ssl.fireeye.cominternalNot in the scope2026-11-14
sl.fireeye.comNot in the scope2026-11-14
smtp-east.fireeye.commailNot in the scope2026-11-14
spark.fireeye.comNot in the scope2026-11-14
spf.fireeye.comNot in the scope2026-11-14
spfa.fireeye.comNot in the scope2026-11-14
srv-aedb-sbc.fireeye.comNot in the scope2026-11-14
www.srv-aedb-sbc.fireeye.comNot in the scope2026-11-14
srv-defr-sbc.fireeye.comNot in the scope2026-11-14
www.srv-defr-sbc.fireeye.comNot in the scope2026-11-14
srv-eng-license.fireeye.comNot in the scope2026-11-14
srv-erp-prod-app1a.fireeye.comNot in the scope2026-11-14
srv-erp-prod-app1b.fireeye.comNot in the scope2026-11-14
srv-erp-prod-app2a.fireeye.comNot in the scope2026-11-14
srv-erp-prod-app2b.fireeye.comNot in the scope2026-11-14
srv-inba-adir2.fireeye.comNot in the scope2026-11-14
www.srv-inba-adir2.fireeye.comNot in the scope2026-11-14
srv-inba-dc01e.fireeye.comNot in the scope2026-11-14
www.srv-inba-dc01e.fireeye.comNot in the scope2026-11-14
srv-inba-dc02e.fireeye.comNot in the scope2026-11-14
www.srv-inba-dc02e.fireeye.comNot in the scope2026-11-14
srv-inba-icat01.fireeye.comNot in the scope2026-11-14
www.srv-inba-icat01.fireeye.comNot in the scope2026-11-14
srv-inba-owapp1.fireeye.comNot in the scope2026-11-14
srv-inba-sbc.fireeye.comNot in the scope2026-11-14
www.srv-inba-sbc.fireeye.comNot in the scope2026-11-14
srv-irco-adir2.fireeye.comNot in the scope2026-11-14
srv-irco-dc02e.fireeye.comNot in the scope2026-11-14
srv-irco-owapp1.fireeye.comNot in the scope2026-11-14
srv-irco-rprm1.fireeye.comNot in the scope2026-11-14
srv-irco-sfbfe1.fireeye.comNot in the scope2026-11-14
srv-irco-sfbfe2.fireeye.comNot in the scope2026-11-14
srv-irco-sfbfe3.fireeye.comNot in the scope2026-11-14
srv-sary-sbc.fireeye.comNot in the scope2026-11-14
www.srv-sary-sbc.fireeye.comNot in the scope2026-11-14
srv-sing-adir2.fireeye.comNot in the scope2026-11-14
www.srv-sing-adir2.fireeye.comNot in the scope2026-11-14
srv-sing-owapp1.fireeye.comNot in the scope2026-11-14
srv-sing-sbc.fireeye.comNot in the scope2026-11-14
www.srv-sing-sbc.fireeye.comNot in the scope2026-11-14
srv-sing-sfbfe1.fireeye.comNot in the scope2026-11-14
srv-sing-sfbfe2.fireeye.comNot in the scope2026-11-14
srv-sing-sfbfe3.fireeye.comNot in the scope2026-11-14
srv-us-nps01.fireeye.comNot in the scope2026-11-14
www.srv-us-nps01.fireeye.comNot in the scope2026-11-14
srv-us-vcrpad-e1a.fireeye.comNot in the scope2026-11-14
srv-usmi-acodew.fireeye.comNot in the scope2026-11-14
srv-usmi-adir2.fireeye.comNot in the scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.