Target Policy

https://app.intigriti.com/api/core/researcher/programs/heretechnologies/heretechnologies

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• *.mobilitygraph.hereapi.com

  ---

  Including, but not limited to, following applications:
  https://predictor.mobilitygraph.hereapi.com/
  https://profile.mobilitygraph.hereapi.com/
  https://subscription.mobilitygraph.hereapi.com/
  

  URL

  medium
• *.subp-router.hereapi.com

  ---

  Including, but not limited to, following application:
  https://vip-als.subp-router.hereapi.com/
  

  URL

  medium
• *.hereapi.com

  ---

  This scope (*.hereapi.com) is for Log4J and Spring4Shell RCE vulnerabilities only.

  URL

  low
• *.account.api.here.com

  URL

  medium
• 955837609

  iOS

  medium
• *.account.here.com

  URL

  medium
• *.scbe.api.here.com

  URL

  medium
• *.here.com

  ---

  This scope (*.here.com) is for Log4J and Spring4Shell RCE vulnerabilities only.

  URL

  low
• *.router.hereapi.com

  ---

  Including, but not limited to, following applications:
  https://matrix.router.hereapi.com/
  https://subp-als.matrix.router.hereapi.com/v8/matrix
  https://transit.router.hereapi.com/
  https://intermodal.router.hereapi.com/

  URL

  medium
• com.here.app.maps

  Android

  medium

Target Scope Domains

• account.api.here.com
• account.here.com
• here.com
• hereapi.com
• mobilitygraph.hereapi.com
• router.hereapi.com
• scbe.api.here.com
• subp-router.hereapi.com

• 4019 Subdomains
• 866 Endpoints
• Download wordlist

---

Last Finished Scan:

---