Vulnerability Disclosure Program (VDP)

VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.

/engagements/united-vdp

BugcrowdView on Bugcrowd
RawAI Enhanced
6
In Scope
50
Out of Scope

In-Scope Assets (6)

AssetCategoryBountyQuick Links
*.ual.comURLNo
*.united.comURLNo
MileagePlus X App for AndroidANDROIDNo-
MileagePlus X App for iOSIOSNo-
United Mobile App for AndroidANDROIDNo-
United Mobile App for iOSIOSNo-
Out-of-Scope Assets (50)
AssetCategoryBounty
*.mileageplus.comURLNo
*.unitedmileageplus.comURLNo
*.unitedvacationsdive.comURLNo
3rd party applications/servicesOTHERNo
Onboard Wi-Fi, entertainment systems or avionicsOTHERNo
bigmetalbird.united.comURLNo
booking.unitedcargo.comURLNo
brand.united.comURLNo
business.united.comURLNo
cardmemberoffers.united.comURLNo
careers.united.comURLNo
cars.united.comURLNo
chargerback.comURLNo
chartercateringops.united.comURLNo
chartersmanifest.united.comURLNo
clubconferencerooms.united.com/unitURLNo
cruises.united.comURLNo
dutyfree.united.comURLNo
globallinks.united.comURLNo
globalservices.united.comURLNo
hotels.united.comURLNo
hub.united.comURLNo
ir.united.comURLNo
jetstream.united.comURLNo
jobparters.united.comURLNo
m.mpdining.rewardsnetwork.comURLNo
mileageplusawards.comURLNo
mpclubcard.comURLNo
mpdining.rewardsnetwork.comURLNo
myexplorercard.comURLNo
mystatus.united.comURLNo
news.united.com/responsysURLNo
newspaper-miles.comURLNo
newsroom.united.comURLNo
opinions.united.comURLNo
packages.united.comURLNo
salesuat.united.comURLNo
survey.continental.com/vovici.netURLNo
thanksamillion.united.comURLNo
theexplorercard.comURLNo
ualmiles.comURLNo
uatp.united.comURLNo
uma.united.comURLNo
united-veterans.jobsURLNo
unitedexplorecard.comURLNo
unitedexplorer.comURLNo
unitedexplorercard.comURLNo
unitedshop.summitmg.comURLNo
urocmobile.ual.comURLNo
vacations.united.comURLNo