Skip to content
Connect AISign inSign up free

Bug bounty reports15,219

Atlas

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Program:Informatica
Status
Severity
Weakness:Cross-site Scripting
Clear
Year
Bounty paid0
Access stated
  • No account0
  • A user account0
  • Admin or privileged0
Access needed
  • No account1
  • A user account0
  • A privileged role0
  • Admin0
  • Physical or local access0
  • Not clear from the report0
Technique
Clear filters28 of 15,219 reports
Disclosed bug bounty reports
ReportStatusWeaknessSeverityDisclosedBountyVotes
Cross-site Scripting (XSS) - DOM - iqcard.informatica.comAnalysed#1004833ValidCross-site ScriptingHigh2020-10-13–27
[kb.informatica.com] Dom Based xss#156166ValidCross-site ScriptingMedium2019-08-17–23
Reflected XSS#267206ValidCross-site ScriptingMedium2018-09-09–17
Store XSS on Informatica University via transcript (informatica.csod.com)#219509ValidCross-site ScriptingHigh2017-09-09–17
Improper Sanitization leads to XSS Fire on admin panel#1011888ValidCross-site ScriptingHigh2021-08-03–15
RXSS in http://procurement-businesscatalog.informatica.com#831803ValidCross-site Scripting–2020-03-27–13
Cross site scripting#1095797ValidCross-site ScriptingHigh2021-05-17–12
[informatica.com]- Cross Site scripting#204237ValidCross-site ScriptingHigh2017-10-30–10
[kb.informatica.com] DOM based XSS in the bindBreadCrumb function#189834ValidCross-site ScriptingHigh2017-06-24–10
[alpha.informatica.com] Expensive DOMXSS#158749ValidCross-site ScriptingMedium2017-07-08–10
[uk.informatica.com] XSS on uk.informatica..com#143323ValidCross-site ScriptingHigh2017-02-28–10
[careers.informatica.com] Cross Site Script Vulnerability on informatica#42537ValidCross-site ScriptingHigh2017-05-10–10
Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]#203912ValidCross-site ScriptingHigh2017-04-08–9
[marketplace.informatica.com] Persistent XSS through document title#181816ValidCross-site ScriptingHigh2017-02-02–8
[parc.informatica.com] Reflected Cross Site Scripting and Open Redirect#178278ValidCross-site ScriptingMedium2017-04-29–8
[network.informatica.com] The login form XSS via the referer value#190016ValidCross-site ScriptingHigh2017-05-22–7
[kb.informatica.com] Stored XSS#170369ValidCross-site ScriptingHigh2017-04-09–7
[marketplace.informatica.com] - Stored XSS#277259ValidCross-site ScriptingHigh2017-12-15–6
[marketplace.informatica.com]-Reflected XSS#266801ValidCross-site ScriptingMedium2017-12-15–6
[doc.rt.informaticacloud.com] Reflected XSS via Stack Strace#232320ValidCross-site ScriptingHigh2022-07-23–6
[now.informatica.com] Reflective Xss#81191ValidCross-site ScriptingHigh2016-05-19–6
[marketplace.informatica.com]- Stored XSS on Image title and Edit Property#202951ValidCross-site ScriptingHigh2017-04-21–5
[marketplace.informatica.com] Search XSS#200034ValidCross-site ScriptingHigh2017-05-22–5
[careers.informatica.com] XSS on "isJTN"#190020ValidCross-site ScriptingHigh2017-04-07–5
[now.informatica.com] Reflective XSS#106678ValidCross-site ScriptingHigh2016-12-09–5
[marketplace.informatica.com] Profile stored XSS#190217ValidCross-site ScriptingHigh2017-04-19–4
Reflected Cross-Site Scripting/HTML Injection#1379158ValidCross-site ScriptingLow2021-12-17–3
XSS in Search Communities Function#47235ValidCross-site ScriptingMedium2015-07-31–1

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (3,686 analysed so far), which can be wrong. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated