Adobe

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.acrobat.com URL critical
*.adobe.io URL critical
*.adobeaemcloud.com URL critical
*.adobecqms.net URL critical
*.bizible.com URL critical
*.marketo.com URL critical
*.mixamo.com URL critical
*.omniture.com URL critical
*.phonegap.com URL critical
*.tubemogul.com URL critical
*.typekit.com URL critical
account.adobe.com URL critical
accounts.adobe.com URL critical
acrobat.adobe.com URL critical
acrobatoauth.adobe.com URL critical
adminconsole.adobe.com URL critical
adobeid.services.adobe.com URL critical
adobelogin.com URL critical
adobestock.com URL critical
assets.adobe.com URL critical
auth.services.adobe.com URL critical
behance.net URL critical
campaign.adobe.com URL critical
captivateprime.adobe.com URL critical
cbconnection.adobe.com URL critical
cloud.acrobat.com URL critical
coldfusion.adobe.com URL critical
commerce.adobe.com URL critical
community.adobe.com URL critical
create.adobe.com URL critical
creative.adobe.com URL critical
creativecloud.adobe.com URL critical
documentcloud.adobe.com URL critical
documents.adobe.com URL critical
edex.adobe.com URL critical
exchange.adobe.com URL critical
experience.adobe.com URL critical
experiencecloud.adobe.com URL critical
fonts.adobe.com URL critical
gps.echosign.com URL critical
helpx.adobe.com URL critical
licenses.adobe.com URL critical
licensing.adobe.com URL critical
lightroom.adobe.com URL critical
marketing-assets.adobe.com URL critical
marketing.adobe.com URL critical
mobilemarketing.adobe.com URL critical
partners.adobe.com URL critical
photoshop.com URL critical
platform.adobe.com URL critical
portfolio.adobe.com URL critical
secure.echosign.com URL critical
shop.adobe.com URL critical
spark.adobe.com URL critical
status.adobe.com URL critical
stock.adobe.com URL critical
substance3d.com URL critical
theblog.adobe.com URL critical
xd.adobe.com URL critical
*.adobe.com URL critical
*.scene7.com URL high high high critical
*.omtrdc.net URL high high high critical
*.adobeconnect.com URL high high high critical
*.tt.omtrdc.net URL high high high critical
Hint: the `Session ID` you may see in GET requests is used to group calls into a session, and it carries no sensitive information.
Adobe AIR DOWNLOADABLE_EXECUTABLES high high high critical
Adobe Acrobat Reader DC DOWNLOADABLE_EXECUTABLES high high high critical
After Effects DOWNLOADABLE_EXECUTABLES high high high critical
Animate DOWNLOADABLE_EXECUTABLES high high high critical
Audition DOWNLOADABLE_EXECUTABLES high high high critical
Bridge DOWNLOADABLE_EXECUTABLES high high high critical
Character Animator DOWNLOADABLE_EXECUTABLES high high high critical
Creative Cloud Desktop Application DOWNLOADABLE_EXECUTABLES high high high critical
Digital Editions DOWNLOADABLE_EXECUTABLES high high high critical
Dreamweaver DOWNLOADABLE_EXECUTABLES high high high critical
Flash Player DOWNLOADABLE_EXECUTABLES high high high critical
Fonts DOWNLOADABLE_EXECUTABLES high high high critical
Framemaker DOWNLOADABLE_EXECUTABLES high high high critical
Illustrator DOWNLOADABLE_EXECUTABLES high high high critical
InCopy DOWNLOADABLE_EXECUTABLES high high high critical
InDesign DOWNLOADABLE_EXECUTABLES high high high critical
Lightroom DOWNLOADABLE_EXECUTABLES high high high critical
Media Encoder DOWNLOADABLE_EXECUTABLES high high high critical
Other DOWNLOADABLE_EXECUTABLES high high high critical
Please select "Other" if you cannot find a more appropriate option.
Photoshop DOWNLOADABLE_EXECUTABLES high high high critical
Prelude DOWNLOADABLE_EXECUTABLES high high high critical
Premiere Pro DOWNLOADABLE_EXECUTABLES critical
XD DOWNLOADABLE_EXECUTABLES high high high critical
com.adobe.reader GOOGLE_PLAY_APP_ID high high high critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity