Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| [marketplace.informatica.com]-Reflected XSS#266801 | Valid | Cross-site Scripting | Medium | 2017-12-15 | – | 6 |
| Unrestricted file upload - cloudacademy.informatica.com#253202 | Valid | No weakness recorded | Medium | 2017-12-01 | – | 6 |
| [doc.rt.informaticacloud.com] Reflected XSS via Stack Strace#232320 | Valid | Cross-site Scripting | High | 2022-07-23 | – | 6 |
| [now.informatica.com] Reflective Xss#81191 | Valid | Cross-site Scripting | High | 2016-05-19 | – | 6 |
| [informatica.com]- Information Disclosure#204239 | Valid | Information Disclosure | Medium | 2018-09-05 | – | 5 |
| [marketplace.informatica.com]- Stored XSS on Image title and Edit Property#202951 | Valid | Cross-site Scripting | High | 2017-04-21 | – | 5 |
| [marketplace.informatica.com] Search XSS#200034 | Valid | Cross-site Scripting | High | 2017-05-22 | – | 5 |
| [careers.informatica.com] XSS on "isJTN"#190020 | Valid | Cross-site Scripting | High | 2017-04-07 | – | 5 |
| [marketplace.informatica.com] Open Redirect#123625 | Valid | Open Redirect | Low | 2016-06-27 | – | 5 |
| [now.informatica.com] Reflective XSS#106678 | Valid | Cross-site Scripting | High | 2016-12-09 | – | 5 |
| [https://life.informatica.com] - information disclose#312292 | Valid | Information Disclosure | High | 2019-07-12 | – | 4 |
| [marketplace.informatica.com] Profile stored XSS#190217 | Valid | Cross-site Scripting | High | 2017-04-19 | – | 4 |
| [kb.informatica.com] Unauthenticated emails and HTML injection in email messages#139402 | Valid | Cross-Site Request Forgery | Medium | 2016-11-28 | – | 4 |
| Reflected Cross-Site Scripting/HTML Injection#1379158 | Valid | Cross-site Scripting | Low | 2021-12-17 | – | 3 |
| [wave.informatica.com]- Subdomain missconfiguration#205034 | Valid | Misconfiguration and Insecure Design | Medium | 2017-02-19 | – | 3 |
| [community.informatica.com] - CSRF in Private Messages allows to move user's messages to Trash#45050 | Valid | Cross-Site Request Forgery | High | 2016-03-02 | – | 3 |
| XSS in Search Communities Function#47235 | Valid | Cross-site Scripting | Medium | 2015-07-31 | – | 1 |
| Missing SPF for informatica.com#39250 | Informative | Misconfiguration and Insecure Design | – | 2015-01-12 | – | 1 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (2,190 analysed so far), which can be wrong. Data as of 2026-11-15.