Bug bounty program
TR
Trellix
Most upvoted reports5
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| default credentials at https://52.42.105.71/Analysed#2160178 | Authentication | 2024-02-01 | – | 77 |
| Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658 | Command and Code Injection | 2025-01-12 | – | 60 |
| Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781 | Authentication | 2024-02-02 | – | 59 |
| RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477 | Cross-site Scripting | 2025-12-19 | – | 54 |
| Sensitive Information Disclosure#1577793 | No weakness recorded | 2023-04-14 | – | 12 |
Subdomains4,969
| Name | Scope | First seen |
|---|---|---|
| aidb-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| aiws-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| api-iam-stg.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| stage-helixconnect.cloud.aws.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stage.security.cis.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stage.cis.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stage.tokenauth.cis.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stage.viz.cis.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-dev01.cloud.apps.fireeye.comapi, dev, staging, tools | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| stage-etp-simple-api-app.k8s-etp-prd09.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| etp-stage-simple-api-app.k8s-etp-qa01.cloud.apps.fireeye.comapi, staging, tools | Not in the scope | 2026-11-14 |
| stage.dev-tokenserver.apps.fireeye.comdev, staging | Not in the scope | 2026-11-14 |
| stage.fireml.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| api-docs-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| api-feiam-stg00-gc.iam.apps.fireeye.comapi, auth, staging | Not in the scope | 2026-11-14 |
| console-feiam-stg00-gc.iam.apps.fireeye.comadmin, auth, staging | Not in the scope | 2026-11-14 |
| grafana-stg.iam.apps.fireeye.comauth, monitoring, staging | Not in the scope | 2026-11-14 |
| idp-feiam-stg00-gc.iam.apps.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| log-ingest-stg.iam.apps.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| log-ingest-stg-server.iam.apps.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| notification-feiam-stg00-gc.iam.apps.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| schema-feiam-stg00-gc.iam.apps.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| stg.ingest.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| souse1stg01v2.so.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| hapstg1.staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| hapstg2.staging.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stg.arb.svpc.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stg.dtrk.svpc.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.blue.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-admin-blue.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-admin-green.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| federation-blue.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-green.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.federation.stage.us.apps.fireeye.comstaging | Not in the scope | 2026-11-14 |
| federation-admin.green.stage.us.apps.fireeye.comadmin, staging | Not in the scope | 2026-11-14 |
| ati-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.ati-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| atiapi-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| auth-stage.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| www.auth-stage.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| auth-stage65.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| auth-staging.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| www.auth-staging.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| bmw-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.bmw-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| cloud-preprod.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.cloud-preprod.fireeye.comstaging | Not in the scope | 2026-11-14 |
| cloud-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.cloud-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| console-iam-stg.fireeye.comadmin, auth, staging | Not in the scope | 2026-11-14 |
| context-staging.fireeye.comstaging | Not in the scope | 2026-11-14 |
| context-staging-gateway.fireeye.comstaging | Not in the scope | 2026-11-14 |
| cmdb-stage.corp.fireeye.cominternal, staging | Not in the scope | 2026-11-14 |
| cmdb-writer-stage.corp.fireeye.cominternal, staging | Not in the scope | 2026-11-14 |
| itsm-stage.corp.fireeye.cominternal, staging | Not in the scope | 2026-11-14 |
| oo-stage.corp.fireeye.cominternal, staging | Not in the scope | 2026-11-14 |
| fereputation-stage.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-mta-evaluation-stage-01.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-mta-stage-01.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-mta-stage-02.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-mta-stage-03.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-relay-stage-01.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2a-etp-cloudmark-relay-stage-02.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| or2b-etp-rest-api-stage-01.cso.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| or2b-etp-web-iam-stage-01.cso.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| or2b-etp-web-iam-stage-02.cso.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| smf-mvx-enrollment-beta-1.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.smf-mvx-enrollment-beta-1.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| smf-mvx-enrollment-beta-2.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.smf-mvx-enrollment-beta-2.cso.fireeye.comstaging | Not in the scope | 2026-11-14 |
| api-neptune-stage.datalake.fireeye.comapi, staging | Not in the scope | 2026-11-14 |
| docs-iam-stg.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| download-beta.fireeye.comstaging | Not in the scope | 2026-11-14 |
| download-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| download-staging.fireeye.comstaging | Not in the scope | 2026-11-14 |
| dtitap-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
| alpha.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| alpha01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| alpha02.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| beta01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-ohio-1.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-ohio-2.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-ohio-3.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| env-alpha-vir-1.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| global-alpha.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| global-beta.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-beta01.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-beta02.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| i-devops-beta.endpoint.fireeye.comstaging | Not in the scope | 2026-11-14 |
| ibus-staging.eng.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.ibus-staging.eng.fireeye.comstaging | Not in the scope | 2026-11-14 |
| staging.helix.eu.fireeye.comstaging | Not in the scope | 2026-11-14 |
| www.staging.helix.eu.fireeye.comstaging | Not in the scope | 2026-11-14 |
| auth-staging.faas.fireeye.comauth, staging | Not in the scope | 2026-11-14 |
| faude2-stage.fireeye.comstaging | Not in the scope | 2026-11-14 |
1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.