Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| api.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-docs.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api-docs.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api.ap.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-iam-int.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-iam-stg.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| ccs-api-dev01-blue.etp-dev01.cloud.apps.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| ccs-api-dev01-green.etp-dev01.cloud.apps.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| ccs-api-qa01-blue.etp-dev01.cloud.apps.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| ccs-api-qa01-green.etp-dev01.cloud.apps.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| ccs-api-prd01-blue.etp-prd01.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd01-green.etp-prd01.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd06-blue.etp-prd06.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd06-green.etp-prd06.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd07-blue.etp-prd07.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd07-green.etp-prd07.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd08-blue.etp-prd08.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd08-green.etp-prd08.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd09-blue.etp-prd09.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd09-green.etp-prd09.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd11-blue.etp-prd11.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-prd11-green.etp-prd11.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-qa01-blue.etp-qa01.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-qa01-green.etp-qa01.cloud.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| ccs-api-dev01.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, tools | Not in the scope | 2026-11-14 |
| etp-simple-api-app.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, tools | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, staging, tools | Not in the scope | 2026-11-14 |
| blue-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, tools | Not in the scope | 2026-11-14 |
| etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, tools | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| green-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, tools | Not in the scope | 2026-11-14 |
| stage-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| etp-simple-api-app.k8s-etp-qa01.cloud.apps.fireeye.comapi, tools | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-qa01.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| api.darwin.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api.darwin.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| api2.darwin.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api2.darwin.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| delta5-kub-test-api.delta5kub.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api-docs-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, dev | Not in the scope | 2026-11-14 |
| api-docs-feiam-qa00.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-docs-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| api-feiam-dev00-gc.iam.apps.fireeye.comapi, auth, dev | Not in the scope | 2026-11-14 |
| api-feiam-qa.iam.apps.fireeye.comapi, auth, test | Not in the scope | 2026-11-14 |
| api-feiam-qa00.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| api-gw-poc.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api.feiam-dev00.iam.apps.fireeye.comapi, auth, dev | Not in the scope | 2026-11-14 |
| api-docs.feiam-dev00.iam.apps.fireeye.comapi, auth, dev | Not in the scope | 2026-11-14 |
| api.feiam-prd00.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-docs.feiam-prd00.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api.ops01-govcloud.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-docs.ops01-govcloud.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api.ops01.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| api-docs.ops01.iam.apps.fireeye.comapi, auth | Not in the scope | 2026-11-14 |
| titan-api.marketplace.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.titan-api.marketplace.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| metrics-api.apps.fireeye.comapi, monitoring | Not in the scope | 2026-11-14 |
| www.metrics-api.apps.fireeye.comapi, monitoring | Not in the scope | 2026-11-14 |
| api.storytime.apps.fireeye.comapi | Not in the scope | 2026-11-14 |
| qa.api.darwin.test02-usw2.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| www.qa.api.darwin.test02-usw2.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| zulu0kub-test-api.testkub.apps.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api.ca.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-docs.ca.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.cloud.fireeye.comapi | Not in the scope | 2026-11-14 |
| iad-cc-api-prod-01.cso.fireeye.comapi | Not in the scope | 2026-11-14 |
| iad-cc-api-prod-02.cso.fireeye.comapi | Not in the scope | 2026-11-14 |
| or2b-etp-rest-api-stage-01.cso.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| smf-cc-api-prod-01.cso.fireeye.comapi | Not in the scope | 2026-11-14 |
| usw2-etp-rest-api-dev-02.cso.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| api-neptune.datalake.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-neptune-qa.datalake.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api-neptune-stage.datalake.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| containment-api.docs.endpoint.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.eu.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-docs.eu.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api-docs.eu.fireeye.comapi | Not in the scope | 2026-11-14 |
| www.api.eu.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.ap.feconnect.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.staging.ap.feconnect.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| api.feconnect.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.eu.feconnect.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.staging.eu.feconnect.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| api.staging.feconnect.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| athena-api.staging.feconnect.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| api.test.feconnect.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api.horizon.fireeye.comapi, vpn | Not in the scope | 2026-11-14 |
| api-dev.horizon.fireeye.comapi, dev, vpn | Not in the scope | 2026-11-14 |
| api.intelligence.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-dev.intelligence.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| api-qa.intelligence.fireeye.comapi, test | Not in the scope | 2026-11-14 |
| api-staging.intelligence.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| www.api-staging.intelligence.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| www.api.intelligence.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.kops.fireeye.comapi | Not in the scope | 2026-11-14 |
| hc-api.selabs.fireeye.comapi | Not in the scope | 2026-11-14 |
| api.services.fireeye.comapi | Not in the scope | 2026-11-14 |
| api-dev.services.fireeye.comapi, dev | Not in the scope | 2026-11-14 |
| api-qa.services.fireeye.comapi, test | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.