Skip to content
Connect AISign inSign up free

Bug bounty program

TR

Trellix

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Root
Scope
Name suggests:Monitoring
First seen
Text fileClear filters57 names
Subdomains of Trellix
NameScopeFirst seen
grafana.etp-dev01.cloud.apps.fireeye.comdev, monitoringNot in the scope2026-11-14
grafana.etp-prd01.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-prd06.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-prd07.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-prd08.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-prd09.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-prd11.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.etp-qa01.cloud.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana-int.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ap.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-ca.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-eu.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-prod-us.iam.apps.fireeye.comauth, monitoringNot in the scope2026-11-14
grafana-qa.iam.apps.fireeye.comauth, monitoring, testNot in the scope2026-11-14
grafana-stg.iam.apps.fireeye.comauth, monitoring, stagingNot in the scope2026-11-14
grafana.prd03.infra.apps.fireeye.commonitoringNot in the scope2026-11-14
grafana.prd10.infra.apps.fireeye.commonitoringNot in the scope2026-11-14
metrics-api.apps.fireeye.comapi, monitoringNot in the scope2026-11-14
www.metrics-api.apps.fireeye.comapi, monitoringNot in the scope2026-11-14
grafana.sre-dev01.apps.fireeye.comdev, monitoringNot in the scope2026-11-14
grafana.sre-prod01.apps.fireeye.commonitoringNot in the scope2026-11-14
hexdev222-grafana.sre.apps.fireeye.commonitoringNot in the scope2026-11-14
smf-infr-splunk-srch-prod-1.cso.fireeye.commonitoringNot in the scope2026-11-14
www.smf-infr-splunk-srch-prod-1.cso.fireeye.commonitoringNot in the scope2026-11-14
usgova-etp-splunk-search-prod-vip.cso.fireeye.commonitoringNot in the scope2026-11-14
usgovb-etp-splunk-search-prod-vip.cso.fireeye.commonitoringNot in the scope2026-11-14
labs-alertmanager-blr.eng.fireeye.commonitoringNot in the scope2026-11-14
www.labs-alertmanager-blr.eng.fireeye.commonitoringNot in the scope2026-11-14
labs-monitor-blr.eng.fireeye.commonitoringNot in the scope2026-11-14
www.labs-monitor-blr.eng.fireeye.commonitoringNot in the scope2026-11-14
labs-prom-grafana.eng.fireeye.commonitoringNot in the scope2026-11-14
www.labs-prom-grafana.eng.fireeye.commonitoringNot in the scope2026-11-14
labs-prom-monitor.eng.fireeye.commonitoringNot in the scope2026-11-14
www.labs-prom-monitor.eng.fireeye.commonitoringNot in the scope2026-11-14
splunk-collector-01.eng.fireeye.commonitoringNot in the scope2026-11-14
grafana.ap.feconnect.fireeye.commonitoringNot in the scope2026-11-14
grafana.eu.feconnect.fireeye.commonitoringNot in the scope2026-11-14
grafana.feconnect.fireeye.commonitoringNot in the scope2026-11-14
grafana.staging.feconnect.fireeye.commonitoring, stagingNot in the scope2026-11-14
grafana.test.feconnect.fireeye.commonitoring, testNot in the scope2026-11-14
lvs-infr-splunk-srch-prod-1.fireeye.commonitoringNot in the scope2026-11-14
www.lvs-infr-splunk-srch-prod-1.fireeye.commonitoringNot in the scope2026-11-14
metrics.fireeye.commonitoringNot in the scope2026-11-14
kibana.selabs.fireeye.commonitoringNot in the scope2026-11-14
status.fireeye.commonitoringNot in the scope2026-11-14
www.status.fireeye.commonitoringNot in the scope2026-11-14
graylog.a.sjc.training.fireeye.commonitoringNot in the scope2026-11-14
sentry.sjc.training.fireeye.commonitoringNot in the scope2026-11-14
status.skyhighsecurity.commonitoringIn scope2026-11-14
grafana.vpn.staging.mdr.trellix.commonitoring, staging, vpnIn scope2026-11-14
prometheus.vpn.staging.mdr.trellix.commonitoring, staging, vpnIn scope2026-11-14
grafana.vpn.mdr.trellix.commonitoring, vpnIn scope2026-11-14
prometheus.vpn.mdr.trellix.commonitoring, vpnIn scope2026-11-14
status.trellix.commonitoringIn scope2026-11-14
status-qa.trellix.commonitoring, testIn scope2026-11-14
www.status-qa.trellix.commonitoring, testIn scope2026-11-14
www.status.trellix.commonitoringIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated