Skip to content

Bug bounty reports15,219

Publicly disclosed HackerOne reports, with the platform's own outcome and severity.

Program:Informatica
Status
Severity
Weakness
Year:2017
Clear
Bounty paid0
Access stated
  • No account0
  • A user account0
  • Admin or privileged0
Access needed
  • No account0
  • A user account0
  • A privileged role0
  • Admin0
  • Physical or local access0
  • Not clear from the report0
Clear filters26 of 15,219 reports
Disclosed bug bounty reports
ReportStatusWeaknessSeverityDisclosedBountyVotes
[ipm.informatica.com] Sql injection Oracle#178057ValidSQL InjectionCritical2017-01-21–28
[app.informaticaondemand.com] XXE#105753ValidDenial of ServiceHigh2017-04-08–25
XXE in upload file feature#105787ValidDenial of ServiceHigh2017-05-10–22
Store XSS on Informatica University via transcript (informatica.csod.com)#219509ValidCross-site ScriptingHigh2017-09-09–17
[marketplace.informatica.com] User email disclosure#230608ValidInformation DisclosureLow2017-11-07–11
[marketplace.informatica.com] - Sensitive Data Exposure#270695ValidInformation DisclosureLow2017-12-18–10
[informatica.com]- Cross Site scripting#204237ValidCross-site ScriptingHigh2017-10-30–10
[ipm.informatica.com]- Broken Authentication#201152ValidAuthenticationHigh2017-04-11–10
[kb.informatica.com] DOM based XSS in the bindBreadCrumb function#189834ValidCross-site ScriptingHigh2017-06-24–10
[afocusp.informatica.com] Sql injection afocusp.informatica.com:37777#178632ValidSQL InjectionCritical2017-01-21–10
[alpha.informatica.com] Expensive DOMXSS#158749ValidCross-site ScriptingMedium2017-07-08–10
[uk.informatica.com] XSS on uk.informatica..com#143323ValidCross-site ScriptingHigh2017-02-28–10
[careers.informatica.com] Cross Site Script Vulnerability on informatica#42537ValidCross-site ScriptingHigh2017-05-10–10
Stored XSS via Discussion Title and Send as Email attribute in [marketplace.informatica.com]#203912ValidCross-site ScriptingHigh2017-04-08–9
[marketplace.informatica.com] Persistent XSS through document title#181816ValidCross-site ScriptingHigh2017-02-02–8
[parc.informatica.com] Reflected Cross Site Scripting and Open Redirect#178278ValidCross-site ScriptingMedium2017-04-29–8
[network.informatica.com] The login form XSS via the referer value#190016ValidCross-site ScriptingHigh2017-05-22–7
[kb.informatica.com] Stored XSS#170369ValidCross-site ScriptingHigh2017-04-09–7
[marketplace.informatica.com] - Stored XSS#277259ValidCross-site ScriptingHigh2017-12-15–6
[marketplace.informatica.com]-Reflected XSS#266801ValidCross-site ScriptingMedium2017-12-15–6
Unrestricted file upload - cloudacademy.informatica.com#253202ValidNo weakness recordedMedium2017-12-01–6
[marketplace.informatica.com]- Stored XSS on Image title and Edit Property#202951ValidCross-site ScriptingHigh2017-04-21–5
[marketplace.informatica.com] Search XSS#200034ValidCross-site ScriptingHigh2017-05-22–5
[careers.informatica.com] XSS on "isJTN"#190020ValidCross-site ScriptingHigh2017-04-07–5
[marketplace.informatica.com] Profile stored XSS#190217ValidCross-site ScriptingHigh2017-04-19–4
[wave.informatica.com]- Subdomain missconfiguration#205034ValidMisconfiguration and Insecure DesignMedium2017-02-19–3

Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (3,187 analysed so far), which can be wrong. Data as of 2026-11-15.