Bug Bounties

NISC-VDP

Powered by: 

Allows bounty splitting: 

Average time to first program response: 

Average time to bounty awarded null: 

Average time to report resolved: 

Handle nisc

Managed program: true

Name: NISC-VDP

Offers bounties: false

Offers swag: false

Response efficiency percentage: 100

Submission state: open

Url: https://hackerone.com/nisc

Website: http://nisc.coop

In scope:

  • Asset identifier: Capturis Vendor Portal
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: NISC Cloud Portal
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: NISC Community
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: NISC Payment Gateway
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: NISC SmartHub
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE ABS
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE AppSuite
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE CC&B
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE Connect
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE Document Vault
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: iVUE E&O
  • Asset type: OTHER
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: 
  • Eligible for submissions: true
  • Instruction: Submissions for noncredentialed access only. NISC does not issue credentials for its public vulnerability disclosure program.
  • Integrity requirements: 
  • Max severity: critical