Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
6
Disclosed reports
5
Subdomains
4,969
Vendor on CyberSIXT
Trellix (58 CVEs, 0 exploited)

Most upvoted reports5

Most upvoted reports of Trellix
ReportWeaknessDisclosedBountyVotes
default credentials at https://52.42.105.71/Analysed#2160178Authentication2024-02-01–77
Unauthenticated Path Traversal and Command Injection in Trellix Enterprise Security Manager 11.6.10Analysed#2817658Command and Code Injection2025-01-12–60
Vulnerability Report: NO RATE LIMIT Password RESETAnalysed#640781Authentication2024-02-02–59
RXSS in https://jp.mcafee.com/apps/mdm/jp/3.0_asp/Analysed#1068477Cross-site Scripting2025-12-19–54
Sensitive Information Disclosure#1577793No weakness recorded2023-04-14–12

Subdomains4,969

Subdomains of Trellix
NameScopeFirst seen
blr-vpn.fireeye.comvpnNot in the scope2026-11-14
sca01-n102-vpn01.eng.fireeye.comvpnNot in the scope2026-11-14
mil1390-ipv6-vpn01.eng6.fireeye.comvpnNot in the scope2026-11-14
horizon.fireeye.comvpnNot in the scope2026-11-14
api.horizon.fireeye.comapi, vpnNot in the scope2026-11-14
api-dev.horizon.fireeye.comapi, dev, vpnNot in the scope2026-11-14
dev.horizon.fireeye.comdev, vpnNot in the scope2026-11-14
iad-vpn.fireeye.comvpnNot in the scope2026-11-14
lab-vpn.fireeye.comvpnNot in the scope2026-11-14
nl1-vpn.fireeye.comvpnNot in the scope2026-11-14
nl1-vpn-001.fireeye.comvpnNot in the scope2026-11-14
ork-vpn.fireeye.comvpnNot in the scope2026-11-14
partners-vpn.fireeye.comvpnNot in the scope2026-11-14
www.partners-vpn.fireeye.comvpnNot in the scope2026-11-14
access.alliances.selabs.fireeye.comvpnNot in the scope2026-11-14
mta-sts.access.alliances.selabs.fireeye.comvpnNot in the scope2026-11-14
wildcard.access.alliances.selabs.fireeye.comvpnNot in the scope2026-11-14
access.ash.selabs.fireeye.comvpnNot in the scope2026-11-14
wildcard.access.ash.selabs.fireeye.comvpnNot in the scope2026-11-14
access.dev.selabs.fireeye.comdev, vpnNot in the scope2026-11-14
wildcard.access.dev.selabs.fireeye.comdev, vpnNot in the scope2026-11-14
access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
af.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
archie.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
hexshj633.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
hexzdm346-hx-webui-1.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
wildcard.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
www.access.dxb.selabs.fireeye.comvpnNot in the scope2026-11-14
access.local.selabs.fireeye.comdev, vpnNot in the scope2026-11-14
access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
alaska.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
cm01.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
firewallnx01.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
hexght.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
hexjbn672-cms-ssh-1.access.ork.selabs.fireeye.comadmin, vpnNot in the scope2026-11-14
hx03.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
nx01.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
scottbetacloud-stagent-1.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
cm01.staff.access.ork.selabs.fireeye.cominternal, vpnNot in the scope2026-11-14
wildcard.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
www.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
dnews.www.access.ork.selabs.fireeye.comvpnNot in the scope2026-11-14
access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
calvin.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
charlotte.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
hexfgn442-hxdmz-ssh-1.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
hexzkg979-hxdmz-ssh-1.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
mta-sts.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
wildcard.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
www.access.sfo.selabs.fireeye.comvpnNot in the scope2026-11-14
access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
0.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
alpha.access.tyo.selabs.fireeye.comstaging, vpnNot in the scope2026-11-14
ax01.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
cm01.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
ex01.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
fortworth.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
fx02v.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
hx01.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
hx03.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
mta-sts.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
nx01.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
nx03.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
wildcard.access.tyo.selabs.fireeye.comvpnNot in the scope2026-11-14
access.xfire.selabs.fireeye.comvpnNot in the scope2026-11-14
sgp-vpn.fireeye.comvpnNot in the scope2026-11-14
sin-vpn.fireeye.comvpnNot in the scope2026-11-14
sin1-b1-f38m1-vpn1.fireeye.comvpnNot in the scope2026-11-14
sjc-vpn.fireeye.comvpnNot in the scope2026-11-14
sslvpn.fireeye.comvpnNot in the scope2026-11-14
syd-vpn.fireeye.comvpnNot in the scope2026-11-14
www.syd-vpn.fireeye.comvpnNot in the scope2026-11-14
syd1-b1-f11m1-vpn1.fireeye.comvpnNot in the scope2026-11-14
syd1-b1-f6m1-vpn1.fireeye.comvpnNot in the scope2026-11-14
access.ork.training.fireeye.comvpnNot in the scope2026-11-14
www.access.ork.training.fireeye.comvpnNot in the scope2026-11-14
access.sfo.training.fireeye.comvpnNot in the scope2026-11-14
www.access.sfo.training.fireeye.comvpnNot in the scope2026-11-14
vpn.training.fireeye.comvpnNot in the scope2026-11-14
us1-vpn.fireeye.comvpnNot in the scope2026-11-14
us2-vpn.fireeye.comvpnNot in the scope2026-11-14
use-vpn.fireeye.comvpnNot in the scope2026-11-14
vaml-sslvpn.fireeye.comvpnNot in the scope2026-11-14
vpn.fireeye.comvpnNot in the scope2026-11-14
vpn-eng.fireeye.comvpnNot in the scope2026-11-14
access.xfire.fireeye.comvpnNot in the scope2026-11-14
access.sandbox.xfire.fireeye.comtest, vpnNot in the scope2026-11-14
access.workbench.xfire.fireeye.comvpnNot in the scope2026-11-14
de-pav-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
in-ban-local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
local.vpn.skyhighsecurity.comdev, vpnIn scope2026-11-14
bps-rdp.trellix.comvpnIn scope2026-11-14
de-pav-vpn1.trellix.comvpnIn scope2026-11-14
in-ban-vpn1.trellix.comvpnIn scope2026-11-14
bps-rdp.beta.manage.trellix.comadmin, staging, vpnIn scope2026-11-14
bps-rdp.manage.trellix.comadmin, vpnIn scope2026-11-14
rdp.onet.manage.trellix.comadmin, vpnIn scope2026-11-14
api.vpn.staging.mdr.trellix.comapi, staging, vpnIn scope2026-11-14
broker.vpn.staging.mdr.trellix.comstaging, vpnIn scope2026-11-14
dashboard.vpn.staging.mdr.trellix.comadmin, staging, vpnIn scope2026-11-14

1,401 names are covered by the program's own scope; 1 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.