Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Disclosed bug bounty reports
Report	Status	Weakness	Severity	Disclosed	Bounty	Votes
Public Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker AccessAnalysed#631348	Valid	Information Disclosure	Critical	2019-08-06	–	24
[marketplace.informatica.com] User email disclosure#230608	Valid	Information Disclosure	Low	2017-11-07	–	11
[marketplace.informatica.com] - Sensitive Data Exposure#270695	Valid	Information Disclosure	Low	2017-12-18	–	10
F5 BIG-IP Cookie potentially reveal BigIP pool name, backend's IP address and port, routed domain.#1211094	Valid	Information Disclosure	Low	2021-06-28	–	9
[http://www.informatica.com]- info disclosure#311058	Valid	Information Disclosure	Critical	2018-02-26	–	9
[product360.informatica.com] Unauthenticated Apache Tomcat 8 Installation#146436	Valid	Information Disclosure	Low	2016-12-08	–	9
jira discloser information#994612	Valid	Information Disclosure	Low	2022-10-03	–	6
[informatica.com]- Information Disclosure#204239	Valid	Information Disclosure	Medium	2018-09-05	–	5
[https://life.informatica.com] - information disclose#312292	Valid	Information Disclosure	High	2019-07-12	–	4

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report, where there is one, which can be wrong. Data as of 2026-11-15.