Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| XSS in Search Communities Function#47235 | Valid | Cross-site Scripting | Medium | 2015-07-31 | – | 1 |
| Reflected Cross-Site Scripting/HTML Injection#1379158 | Valid | Cross-site Scripting | Low | 2021-12-17 | – | 3 |
| [marketplace.informatica.com] Profile stored XSS#190217 | Valid | Cross-site Scripting | High | 2017-04-19 | – | 4 |
| [now.informatica.com] Reflective XSS#106678 | Valid | Cross-site Scripting | High | 2016-12-09 | – | 5 |
| [careers.informatica.com] XSS on "isJTN"#190020 | Valid | Cross-site Scripting | High | 2017-04-07 | – | 5 |
| [marketplace.informatica.com] Search XSS#200034 | Valid | Cross-site Scripting | High | 2017-05-22 | – | 5 |
| [marketplace.informatica.com]- Stored XSS on Image title and Edit Property#202951 | Valid | Cross-site Scripting | High | 2017-04-21 | – | 5 |
| [now.informatica.com] Reflective Xss#81191 | Valid | Cross-site Scripting | High | 2016-05-19 | – | 6 |
| [doc.rt.informaticacloud.com] Reflected XSS via Stack Strace#232320 | Valid | Cross-site Scripting | High | 2022-07-23 | – | 6 |
| [marketplace.informatica.com]-Reflected XSS#266801 | Valid | Cross-site Scripting | Medium | 2017-12-15 | – | 6 |
| [marketplace.informatica.com] - Stored XSS#277259 | Valid | Cross-site Scripting | High | 2017-12-15 | – | 6 |
| [kb.informatica.com] Stored XSS#170369 | Valid | Cross-site Scripting | High | 2017-04-09 | – | 7 |
| [network.informatica.com] The login form XSS via the referer value#190016 | Valid | Cross-site Scripting | High | 2017-05-22 | – | 7 |
| [parc.informatica.com] Reflected Cross Site Scripting and Open Redirect#178278 | Valid | Cross-site Scripting | Medium | 2017-04-29 | – | 8 |
| [marketplace.informatica.com] Persistent XSS through document title#181816 | Valid | Cross-site Scripting | High | 2017-02-02 | – | 8 |
| Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]#203912 | Valid | Cross-site Scripting | High | 2017-04-08 | – | 9 |
| [careers.informatica.com] Cross Site Script Vulnerability on informatica#42537 | Valid | Cross-site Scripting | High | 2017-05-10 | – | 10 |
| [uk.informatica.com] XSS on uk.informatica..com#143323 | Valid | Cross-site Scripting | High | 2017-02-28 | – | 10 |
| [alpha.informatica.com] Expensive DOMXSS#158749 | Valid | Cross-site Scripting | Medium | 2017-07-08 | – | 10 |
| [kb.informatica.com] DOM based XSS in the bindBreadCrumb function#189834 | Valid | Cross-site Scripting | High | 2017-06-24 | – | 10 |
| [informatica.com]- Cross Site scripting#204237 | Valid | Cross-site Scripting | High | 2017-10-30 | – | 10 |
| Cross site scripting#1095797 | Valid | Cross-site Scripting | High | 2021-05-17 | – | 12 |
| RXSS in http://procurement-businesscatalog.informatica.com#831803 | Valid | Cross-site Scripting | – | 2020-03-27 | – | 13 |
| Improper Sanitization leads to XSS Fire on admin panel#1011888 | Valid | Cross-site Scripting | High | 2021-08-03 | – | 15 |
| Store XSS on Informatica University via transcript (informatica.csod.com)#219509 | Valid | Cross-site Scripting | High | 2017-09-09 | – | 17 |
| Reflected XSS#267206 | Valid | Cross-site Scripting | Medium | 2018-09-09 | – | 17 |
| [kb.informatica.com] Dom Based xss#156166 | Valid | Cross-site Scripting | Medium | 2019-08-17 | – | 23 |
| Cross-site Scripting (XSS) - DOM - iqcard.informatica.com#1004833 | Valid | Cross-site Scripting | High | 2020-10-13 | – | 27 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (3,437 analysed so far), which can be wrong. Data as of 2026-11-15.