GeneralInformation

Hostnames	qc.cuny.edu dotnetproduction.f5.qc.cuny.edu
Domains	cuny.edu
Country	United States
City	New York City
Organization	PSI
ISP	City University of New York
ASN	AS31822
Operating System	Windows

WebTechnologies

CDN

jQuery CDN

JavaScript libraries

jQuery3.3.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

OpenPorts

80 443

7689635 | 2024-05-09T23:52:18.406965

80 / tcp

HTTP/1.0 302 Moved Temporarily
Location: https://149.4.99.33/
Server: BigIP
Connection: Keep-Alive
Content-Length: 0

-1390651348 | 2024-05-10T03:46:27.946409

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Tue, 28 Jan 2020 23:07:09 GMT
Accept-Ranges: bytes
ETag: "772f99aa2fd6d51:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Fri, 10 May 2024 03:46:21 GMT
Content-Length: 885
Set-Cookie: BIGipServernetProd34=2237858965.20480.0000; path=/; Httponly; Secure
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e3:6f:74:34:38:5a:88:29:da:cb:95:73:c2:ba:09
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
        Validity
            Not Before: Sep 25 00:00:00 2023 GMT
            Not After : Sep 24 23:59:59 2024 GMT
        Subject: C=US, ST=New York, L=Queens, O=CUNY Queens College, CN=qc.cuny.edu
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:ac:51:67:96:e7:bd:74:22:b6:f4:25:3f:
                    65:75:92:97:55:3b:25:c7:e1:fe:96:66:55:d4:0c:
                    12:34:f7:f8:5f:30:ea:d5:5f:ee:68:5b:29:bf:86:
                    8e:3e:32:b0:c8:45:9c:39:cd:71:03:59:85:01:e4:
                    37:8d:8c:46:8a:db:72:be:1a:94:c2:f1:98:80:35:
                    23:85:10:dd:7c:1a:12:49:83:0b:2d:b7:51:f5:ea:
                    85:e1:d5:ef:c0:6c:ee:8c:c5:df:2b:fb:fd:84:63:
                    57:a2:f3:dc:02:16:2a:ef:98:43:b2:64:04:22:cb:
                    ea:9c:ca:7c:80:c5:f4:a5:cb:0a:b0:04:9a:52:5e:
                    ce:9a:e4:c0:43:04:6a:ab:c0:2a:10:5f:2d:33:78:
                    3d:48:0c:cd:e9:79:12:9b:19:34:0e:41:6e:4c:28:
                    fc:14:ee:8d:ed:f6:ae:89:b1:d7:3d:fa:a2:e4:ab:
                    15:0e:d0:70:71:41:7f:aa:26:f7:d0:28:07:be:0f:
                    b3:b1:ab:cb:13:c8:b0:79:77:af:98:50:6d:33:1e:
                    d9:db:a6:db:c0:2c:3a:09:da:03:d2:1a:5d:6e:fc:
                    dc:a8:30:32:5b:0a:1d:03:d7:89:17:c7:8d:a2:2f:
                    6c:49:b3:83:43:4f:44:c5:dd:bd:2e:6f:14:cf:5a:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
            X509v3 Subject Key Identifier: 
                A8:FD:D3:4B:95:20:A7:98:A8:F1:FF:CF:D9:A1:3F:A0:7D:09:D0:7D
            X509v3 Subject Alternative Name: 
                DNS:qc.cuny.edu, DNS:*.cs.qc.cuny.edu, DNS:*.its.qc.cuny.edu, DNS:*.oit.qc.cuny.edu, DNS:*.qc.cuny.edu
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
            Authority Information Access: 
                OCSP - URI:http://status.geotrust.com
                CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 25 15:08:27.684 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:59:6E:62:32:10:84:AC:4F:EA:BB:9F:9C:
                                34:71:A2:A6:CE:E6:4D:67:9D:A3:21:9C:92:6A:E5:D7:
                                F5:B9:D2:CA:02:21:00:EF:35:4D:7A:CA:17:4A:D1:8B:
                                B5:F1:1D:1A:C7:2F:AF:B2:19:FE:1C:F8:21:0C:2B:0D:
                                43:82:88:DD:D6:B5:3C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 48:B0:E3:6B:DA:A6:47:34:0F:E5:6A:02:FA:9D:30:EB:
                                1C:52:01:CB:56:DD:2C:81:D9:BB:BF:AB:39:D8:84:73
                    Timestamp : Sep 25 15:08:27.664 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:FB:A7:89:25:3F:C9:9F:24:16:E7:B5:
                                D6:9D:12:7F:EE:9C:6F:65:DA:67:DC:05:11:C0:4E:5A:
                                81:85:92:D7:78:02:21:00:E9:F7:F2:1B:86:74:5A:6B:
                                15:1C:DB:8A:40:48:C3:F4:FA:F7:FC:FC:94:43:C0:4B:
                                43:1C:D3:0B:4A:C0:08:95
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DA:B6:BF:6B:3F:B5:B6:22:9F:9B:C2:BB:5C:6B:E8:70:
                                91:71:6C:BB:51:84:85:34:BD:A4:3D:30:48:D7:FB:AB
                    Timestamp : Sep 25 15:08:27.628 2023 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:AE:BB:E7:AA:CD:7F:51:8D:43:8F:6B:
                                8D:4C:57:0C:1F:ED:44:2A:69:79:4C:9F:57:79:82:7D:
                                74:0D:47:76:0E:02:20:3F:F0:42:8A:E0:1F:07:8A:B2:
                                A7:DC:55:E3:AE:47:A0:76:D5:89:CB:5B:5A:23:09:CE:
                                4F:CE:BB:EE:59:4F:20
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        9f:b9:86:3d:14:e6:b9:89:ab:9f:bc:14:c7:9a:1b:16:2a:2b:
        7e:a5:cf:6f:d2:42:be:89:8e:a5:53:e7:82:45:ee:cd:64:a8:
        a0:ef:3c:eb:7a:d1:c2:f0:b9:2c:4e:61:1d:35:a8:e6:b3:af:
        0e:5b:7e:d2:01:12:04:8e:29:f7:e3:a3:fc:0d:8c:0b:2c:e3:
        0d:05:b8:71:c9:45:16:ad:4b:9e:0b:02:e1:8d:e7:7b:65:c6:
        40:be:86:65:09:cd:ab:89:3a:71:73:9d:41:8a:d7:29:d7:dd:
        2b:a4:c5:e2:06:2d:b1:b4:9d:79:4e:26:bb:3e:63:55:34:eb:
        99:55:4c:ca:f8:ec:6c:d1:cb:54:b7:db:a2:6c:02:d6:32:17:
        bf:3d:80:d3:62:f3:bd:fd:48:9d:88:7f:36:7a:aa:df:0d:b8:
        04:32:d7:5d:d5:78:85:00:0b:51:cf:88:3b:bc:48:7e:31:93:
        bb:cd:ca:8e:5e:a7:e1:af:7a:21:c0:e1:e6:f2:fe:63:e5:f0:
        41:07:62:f6:04:77:4f:79:7c:57:30:b0:2b:f2:7c:d8:3f:d9:
        9c:d9:86:d0:af:fa:e6:fd:67:6b:1e:e0:43:03:b1:77:c6:4f:
        26:06:3c:a2:25:9b:11:74:16:fa:96:54:5f:8a:37:98:1a:fd:
        b7:d4:43:6c

149.4.99.33

Last Seen: 2024-05-10

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

7689635 | 2024-05-09T23:52:18.406965
80 / tcp

BigIP

-1390651348 | 2024-05-10T03:46:27.946409
443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

149.4.99.33

Last Seen: 2024-05-10

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

7689635 | 2024-05-09T23:52:18.406965 80 / tcp

BigIP

-1390651348 | 2024-05-10T03:46:27.946409 443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

7689635 | 2024-05-09T23:52:18.406965
80 / tcp

-1390651348 | 2024-05-10T03:46:27.946409
443 / tcp