Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
[https://life.informatica.com] - information disclose#312292	Valid	Information Disclosure	High	2019-07-12	–	4
[informatica.com]- Information Disclosure#204239	Valid	Information Disclosure	–	2018-09-05	–	5
jira discloser information#994612	Valid	Information Disclosure	Low	2022-10-03	–	6
[product360.informatica.com] Unauthenticated Apache Tomcat 8 Installation#146436	Valid	Information Disclosure	–	2016-12-08	–	9
[http://www.informatica.com]- info disclosure#311058	Valid	Information Disclosure	Critical	2018-02-26	–	9
F5 BIG-IP Cookie potentially reveal BigIP pool name, backend's IP address and port, routed domain.#1211094	Valid	Information Disclosure	Low	2021-06-28	–	9
[marketplace.informatica.com] - Sensitive Data Exposure#270695	Valid	Information Disclosure	–	2017-12-18	–	10
[marketplace.informatica.com] User email disclosure#230608	Valid	Information Disclosure	–	2017-11-07	–	11
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker Access#631348	Valid	Information Disclosure	Critical	2019-08-06	–	24

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (1,443 analysed so far), which can be wrong. Data as of 2026-11-14.