Intel · bug bounty
Disclosed bug bounty reports
Every publicly disclosed report on HackerOne the Atlas holds: HackerOne's own outcome, severity, the weakness as filed and the access the title states, and, for analysed reports, how the bug was found in our words.
SortMost upvoted
WeaknessAny class
- Any class
- Cross-site Scripting28
- Cross-Site Request Forgery2
- Open Redirect1
- Server-Side Request Forgery1
- SQL Injection4
- Command and Code Injection10
- Injection and Smuggling1
- File and Path Handling1
- Denial of Service3
- Misconfiguration and Insecure Design2
- Information Disclosure9
- Authentication3
- Access Control2
- No weakness recorded1
Access (title)Any
68 of 15,219 reports · 161 analysed so far
- #836877ValidXXE through injection of a payload in the XMP metadata of a JPEG fileInformatica · Injection and Smuggling · 2020–138votes
- #2583500No longer publicNo rate limiting on form[register]Informatica · Access Control–109votes
- #1034625ValidBlind SQL injection at tsftp.informatica.comInformatica · SQL Injection · 2020–68votes
- #147196Valid[careers.informatica.com] Reflected Cross Site Scripting to XSS Shell PossibleInformatica · Command and Code Injection · 2016–50votes
- #105434Valid[rev-app.informatica.com] - XXEInformatica · Denial of Service · 2016–45votes
- #178057Valid[ipm.informatica.com] Sql injection OracleInformatica · SQL Injection · 2017–28votes
- #1004833ValidCross-site Scripting (XSS) - DOM - iqcard.informatica.comInformatica · Cross-site Scripting · 2020–27votes
- #1004007Valid..; bypass leading to tomcat scripts [Unauthenticated]Informatica · Access Control · 2020 · no account (title)–27votes
- #105753Valid[app.informaticaondemand.com] XXEInformatica · Denial of Service · 2017–25votes
- #631348ValidPublic Github Repo Leaking Internal Credentials Leading To DiscoveryIQ Docker AccessInformatica · Information Disclosure · 2019–24votes
- #156166Valid[kb.informatica.com] Dom Based xssInformatica · Cross-site Scripting · 2019–23votes
- #105787ValidXXE in upload file featureInformatica · Denial of Service · 2017–22votes
- #1081656ValidHtml injection on ██████.informatica.com via search.html?q=1Informatica · Command and Code Injection · 2021–20votes
- #232371Valid[doc.rt.informaticacloud.com] Arbitrary File Reading via Double URL EncodeInformatica · File and Path Handling · 2022–20votes
- #267206ValidReflected XSSInformatica · Cross-site Scripting · 2018–17votes
- #219509ValidStore XSS on Informatica University via transcript (informatica.csod.com)Informatica · Cross-site Scripting · 2017–17votes
- #1011888ValidImproper Sanitization leads to XSS Fire on admin panelInformatica · Cross-site Scripting · 2021–15votes
- #147161Valid[oneclickdrsfdc-test.informatica.com] Tomcat Example Scripts Exposed UnauthenticatedInformatica · Authentication · 2016 · no account (title)–14votes
- #106797Valid[marketplace.informatica.com] - XXEInformatica · Command and Code Injection · 2016–14votes
- #831803ValidRXSS in http://procurement-businesscatalog.informatica.comInformatica · Cross-site Scripting · 2020–13votes
- #1360593ValidCVE-2021-40870 in [███]Informatica · Command and Code Injection · 2021–12votes
- #1095797ValidCross site scriptingInformatica · Cross-site Scripting · 2021–12votes
- #299241Valid[marketplace.informatica.com] - Template InjectionInformatica · Command and Code Injection · 2018–12votes
- #106865Valid[rev-app.informatica.com] - XXE via SAMLInformatica · Command and Code Injection · 2016–12votes
- #106802Valid[marketplace.informatica.com] - XXEInformatica · Command and Code Injection · 2016–12votes
- #1081750Validloing in to marketplace panel on enablement.informatica.comInformatica · Authentication · 2021–11votes
- #230608Valid[marketplace.informatica.com] User email disclosureInformatica · Information Disclosure · 2017–11votes
- #117073Valid[informatica.com] Blind SQL InjectionInformatica · SQL Injection · 2016–11votes
- #270695Valid[marketplace.informatica.com] - Sensitive Data ExposureInformatica · Information Disclosure · 2017–10votes
- #204237Valid[informatica.com]- Cross Site scriptingInformatica · Cross-site Scripting · 2017–10votes
- #201152Valid[ipm.informatica.com]- Broken AuthenticationInformatica · Authentication · 2017–10votes
- #189834Valid[kb.informatica.com] DOM based XSS in the bindBreadCrumb functionInformatica · Cross-site Scripting · 2017–10votes
- #178632Valid[afocusp.informatica.com] Sql injection afocusp.informatica.com:37777Informatica · SQL Injection · 2017–10votes
- #158749Valid[alpha.informatica.com] Expensive DOMXSSInformatica · Cross-site Scripting · 2017–10votes
- #143323Valid[uk.informatica.com] XSS on uk.informatica..comInformatica · Cross-site Scripting · 2017–10votes
- #42537Valid[careers.informatica.com] Cross Site Script Vulnerability on informaticaInformatica · Cross-site Scripting · 2017–10votes
- #1211094ValidF5 BIG-IP Cookie potentially reveal BigIP pool name, backend's IP address and port, routed domain.Informatica · Information Disclosure · 2021–9votes
- #327480ValidSSRF on infawiki.informatica.com and infawikitest.informatica.comInformatica · Server-Side Request Forgery · 2018–9votes
- #311058Valid[http://www.informatica.com]- info disclosureInformatica · Information Disclosure · 2018–9votes
- #203912ValidStored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]Informatica · Cross-site Scripting · 2017–9votes
- #146436Valid[product360.informatica.com] Unauthenticated Apache Tomcat 8 InstallationInformatica · Information Disclosure · 2016 · no account (title)–9votes
- #411270ValidCisco RCEInformatica · Command and Code Injection · 2018–8votes
- #181816Valid[marketplace.informatica.com] Persistent XSS through document titleInformatica · Cross-site Scripting · 2017–8votes
- #178278Valid[parc.informatica.com] Reflected Cross Site Scripting and Open RedirectInformatica · Cross-site Scripting · 2017–8votes
- #672243Validaccounts.informatica.com - RCE due to exposed Groovy consoleInformatica · Command and Code Injection · 2019–7votes
- #190016Valid[network.informatica.com] The login form XSS via the referer valueInformatica · Cross-site Scripting · 2017–7votes
- #170369Valid[kb.informatica.com] Stored XSSInformatica · Cross-site Scripting · 2017–7votes
- #150520ValidXXE at Informatica sub-domainInformatica · Command and Code Injection · 2018–7votes
- #994612Validjira discloser informationInformatica · Information Disclosure · 2022–6votes
- #277259Valid[marketplace.informatica.com] - Stored XSSInformatica · Cross-site Scripting · 2017–6votes
The status is HackerOne's own outcome. “Access (title)” is what the report's title states; “Access (analysis)” and techniques come from CyberSIXT's own analysis, a model's summary of the public report that may be wrong. Data as of 2026-11-14.