GeneralInformation

Hostnames	ASE-SI-Group-Ext.scm.p.azurewebsites.net waws-prod-db3-12081ed7.ftp.p.azurewebsites.windows.net waws-prod-db3-12081ed7.publish.p.azurewebsites.windows.net
Domains	azurewebsites.net windows.net
Cloud Provider	Azure
Cloud Region	northeurope
Cloud Service	AzureCloud
Country	Ireland
City	Dublin
Organization	Microsoft Corp
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Windows

WebTechnologies

CDN

Microsoft Ajax Content Delivery Network

JavaScript libraries

jQuery3.2.1

Miscellaneous

Azure Edge Network

UI frameworks

Bootstrap4.1.1

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041	4.3In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

OpenPorts

21 80 443

-370734890 | 2024-04-16T09:12:01.911813

21 / tcp

220 Microsoft FTP Service
530 User cannot log in.
214-The following commands are recognized (* ==>'s unimplemented).
    ABOR 
    ACCT 
    ADAT *
    ALLO 
    APPE 
    AUTH 
    CCC 
    CDUP 
    CWD 
    DELE 
    ENC *
    EPRT 
    EPSV 
    FEAT 
    HELP 
    HOST 
    LANG 
    LIST 
    MDTM 
    MIC *
    MKD 
    MODE 
    NLST 
    NOOP 
    OPTS 
    PASS 
    PASV 
    PBSZ 
    PORT 
    PROT 
    PWD 
    QUIT 
    REIN 
    REST 
    RETR 
    RMD 
    RNFR 
    RNTO 
    SITE 
    SIZE 
    SMNT 
    STAT 
    STOR 
    STOU 
    STRU 
    SYST 
    TYPE 
    USER 
    XCUP 
    XCWD 
    XMKD 
    XPWD 
    XRMD 
214 HELP command successful.
211-Extended features supported:
 LANG EN*
 UTF8
 AUTH TLS;TLS-C;SSL;TLS-P;
 PBSZ
 PROT C;P;
 CCC
 HOST
 SIZE
 MDTM
 REST STREAM
211 END

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:25:6e:d3:31:79:7b:bc:f1:f3:8b:55:8b:84:5f:a2
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
        Validity
            Not Before: Mar  8 00:00:00 2024 GMT
            Not After : Mar  8 23:59:59 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=waws-prod-db3-12081ed7.publish.p.azurewebsites.windows.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:0c:a8:10:4a:98:3c:2e:fc:ab:e5:c1:8f:
                    ac:aa:5b:f7:bb:50:22:02:88:8f:2b:0d:24:de:7c:
                    ac:9e:9b:62:f7:c4:f0:63:3e:1f:2c:6a:27:77:02:
                    39:c7:49:13:40:2b:70:6b:a0:83:bc:b4:8e:56:57:
                    34:ac:d1:df:42:9e:c7:a1:5d:a5:d7:9f:e9:d1:7c:
                    55:b2:8a:ed:e5:ee:f1:02:f0:62:ef:df:dc:4c:9f:
                    64:b2:fa:7f:62:1e:7d:d9:84:f7:36:d0:8c:1e:f8:
                    49:bb:74:4c:be:24:eb:15:69:85:f3:64:ed:82:24:
                    d5:6c:79:83:65:32:cc:56:bf:d6:03:98:1e:95:d6:
                    85:87:35:6c:8c:90:73:51:37:1f:f7:52:89:f2:47:
                    5d:1f:25:60:f2:f7:49:f0:ac:3f:5c:e9:27:1d:5e:
                    58:72:81:fd:f0:7a:08:91:d7:a8:c9:62:f9:a4:b3:
                    e2:2a:3b:35:15:f9:d0:fd:53:14:dc:09:21:98:0b:
                    42:e6:22:d1:79:50:6d:f5:18:61:da:f5:14:3d:f9:
                    04:b6:29:7a:f6:09:d6:29:79:b4:49:06:bf:9e:4a:
                    81:e3:b5:1b:30:bc:0f:b1:5c:16:ce:2f:a7:fb:0a:
                    f3:16:ac:6f:d6:1c:be:8a:0f:e9:e0:8e:f8:03:68:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
            X509v3 Subject Key Identifier: 
                E9:71:59:D0:7E:84:F4:1A:33:DB:5A:C7:6E:C0:73:4B:A0:74:D0:29
            X509v3 Subject Alternative Name: 
                DNS:waws-prod-db3-12081ed7.publish.p.azurewebsites.windows.net, DNS:waws-prod-db3-12081ed7.ftp.p.azurewebsites.windows.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar  8 22:35:16.891 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3E:9E:C4:94:29:AF:E6:B5:DE:4D:C2:3E:
                                92:5E:D4:33:33:F3:54:F4:DD:4A:BD:10:D1:CF:D4:9F:
                                8F:0F:20:3C:02:20:62:A2:25:C1:DB:4C:40:B7:A8:20:
                                F1:F6:39:B0:F6:AF:28:1C:DD:5E:F1:2D:5A:0B:FD:8E:
                                75:41:66:30:E7:E0
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
                                C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
                    Timestamp : Mar  8 22:35:16.988 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:76:D9:DE:97:16:9C:88:C8:77:32:B3:32:
                                8A:81:05:F5:76:62:1F:1C:DB:99:E9:1E:4F:AD:BE:6C:
                                AF:A6:71:5A:02:20:37:0B:E1:EE:98:EF:DA:57:0C:5E:
                                DA:5A:DA:7A:1E:CE:2A:AD:4E:3B:B2:DB:A1:8E:83:17:
                                CB:0D:7E:DF:C0:5E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  8 22:35:16.865 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CA:AB:08:06:D7:3C:66:65:A0:43:C1:
                                20:77:81:C3:CD:2E:F1:11:B6:2A:5E:BF:20:D9:26:2E:
                                8C:17:41:B6:85:02:21:00:A8:DA:05:57:92:3F:FC:6E:
                                52:7F:FF:E2:7B:45:E5:55:F3:FA:73:23:0A:A4:8F:75:
                                56:31:D0:47:78:A4:67:CA
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        5f:13:ca:64:47:1e:d5:f3:42:f4:24:32:68:f9:5e:3e:9d:f5:
        fc:d5:31:ff:5c:b2:84:40:7e:de:97:58:78:6a:3e:e6:1c:f1:
        f3:fc:0b:3a:9a:d8:5e:a5:bf:82:c2:d5:8f:d7:92:2c:de:14:
        6d:62:0d:ef:00:7f:6e:8e:57:44:8d:3e:cc:1f:bf:39:bc:be:
        6f:4d:5f:57:c9:dc:85:8a:5e:2a:15:04:2a:92:77:c1:50:6e:
        1d:89:8e:54:21:f6:c0:7c:82:31:97:b5:bf:af:32:72:b6:3b:
        83:eb:0c:8c:75:bf:00:db:1d:a2:14:9a:f8:ee:09:62:f6:50:
        b3:c3:9f:36:30:cb:fb:fc:c9:65:1f:5c:5b:89:f6:3f:41:cd:
        6a:4a:f9:ef:a1:2e:19:d5:2f:02:d2:f1:29:5d:d5:62:24:3e:
        ae:f2:11:51:b7:49:28:9a:91:93:38:ce:88:ea:6c:d3:19:50:
        c8:aa:8a:01:4e:b1:04:3b:a4:f5:8b:c1:dd:1c:08:07:cc:a5:
        ad:93:5b:d6:cd:f9:01:e4:37:02:2f:e9:bb:3f:3f:5a:ac:bb:
        c9:1c:3b:b5:37:c3:8f:fe:d6:13:b3:20:21:40:33:d8:74:09:
        53:6d:f1:4e:6b:9a:bc:67:2b:4f:ed:de:78:19:bd:51:c8:07:
        ba:b7:7b:ba

1255762628 | 2024-04-18T18:11:51.532973

80 / tcp

HTTP/1.1 200 OK
Content-Length: 3499
Content-Type: text/html
Last-Modified: Tue, 21 Dec 2021 09:07:37 GMT
Accept-Ranges: bytes
ETag: "b3c9db324af6d71:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Set-Cookie: ARRAffinity=3116d2723913a0a69d3e8c83393894fc5360f3092ba0d501be9f72c600a5cf7d;Path=/;HttpOnly;Domain=dp-dev-widgets.ase-si-group-ext.p.azurewebsites.net
Date: Thu, 18 Apr 2024 18:11:51 GMT

1255762628 | 2024-04-20T01:54:49.717373

443 / tcp

HTTP/1.1 200 OK
Content-Length: 3499
Content-Type: text/html
Last-Modified: Tue, 21 Dec 2021 09:07:37 GMT
Accept-Ranges: bytes
ETag: "b3c9db324af6d71:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Set-Cookie: ARRAffinity=3116d2723913a0a69d3e8c83393894fc5360f3092ba0d501be9f72c600a5cf7d;Path=/;HttpOnly;Secure;Domain=dp-dev-widgets.ase-si-group-ext.p.azurewebsites.net
Set-Cookie: ARRAffinitySameSite=3116d2723913a0a69d3e8c83393894fc5360f3092ba0d501be9f72c600a5cf7d;Path=/;HttpOnly;SameSite=None;Secure;Domain=dp-dev-widgets.ase-si-group-ext.p.azurewebsites.net
Date: Sat, 20 Apr 2024 01:54:49 GMT

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f0:5b:ac:c0:21:7a:bc:b4:03:98:bd:a9:e5:84:2b
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, CN=DigiCert SHA2 Secure Server CA
        Validity
            Not Before: Mar  6 00:00:00 2024 GMT
            Not After : Mar  6 23:59:59 2025 GMT
        Subject: C=US, ST=Washington, L=Redmond, O=Microsoft Corporation, CN=*.ASE-SI-Group-Ext.p.azurewebsites.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:05:db:55:a3:12:96:11:28:5f:2e:dd:c2:
                    ca:9e:c0:1c:c2:32:4f:23:8b:18:10:ad:a1:ff:d5:
                    53:a0:03:28:2f:fc:8a:0e:a8:1f:ed:63:28:92:e3:
                    b1:e8:a8:07:0b:b9:a3:f3:35:d4:47:69:f2:80:c8:
                    91:d2:c1:f3:f5:db:59:23:73:6e:f6:5e:1a:5a:52:
                    b3:d0:71:94:19:d2:58:98:82:6f:34:ce:a2:fa:ec:
                    fe:a3:6b:00:8e:1e:09:cc:36:e9:b8:ab:cb:fb:95:
                    33:72:d1:22:13:bb:52:05:97:f5:a9:a5:6e:7d:31:
                    a0:3e:3b:a6:6f:1a:80:6f:2f:1c:47:d1:2f:0e:e1:
                    00:41:ca:e6:bc:cd:c4:eb:f9:1b:51:8f:b2:66:0c:
                    b6:8b:a0:3b:1d:73:17:ba:fc:c4:54:7e:0e:0f:8c:
                    01:f9:d9:e0:46:d1:aa:f7:3e:df:4a:29:d6:72:5e:
                    e6:db:3a:c5:b0:cd:6a:06:82:82:7b:f7:17:bd:52:
                    a0:6d:c9:25:6a:cb:8b:73:66:a7:f0:31:d2:f4:08:
                    7a:8a:ef:9f:99:b5:f6:8c:a5:3a:b1:d3:06:5e:d8:
                    01:59:26:0c:f6:bf:18:c7:bc:ce:a1:64:c2:7a:c4:
                    9d:ab:6b:a5:11:10:a3:6b:af:17:3f:af:f4:95:f2:
                    ca:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                0F:80:61:1C:82:31:61:D5:2F:28:E7:8D:46:38:B4:2C:E1:C6:D9:E2
            X509v3 Subject Key Identifier: 
                1E:EE:15:F7:92:B4:8A:3F:85:8C:09:DC:8F:62:C3:C1:0A:4D:78:DF
            X509v3 Subject Alternative Name: 
                DNS:*.ASE-SI-Group-Ext.p.azurewebsites.net, DNS:*.scm.ASE-SI-Group-Ext.p.azurewebsites.net, DNS:*.ASE-SI-Group-Ext.p.azure-mobile.net, DNS:*.scm.ASE-SI-Group-Ext.p.azure-mobile.net, DNS:*.azure-apim.net, DNS:*.consent.azure-apim.net, DNS:*.admin.azure-apim.net, DNS:ASE-SI-Group-Ext.scm.p.azurewebsites.net
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://crl3.digicert.com/DigicertSHA2SecureServerCA-1.crl
                Full Name:
                  URI:http://crl4.digicert.com/DigicertSHA2SecureServerCA-1.crl
            Authority Information Access: 
                OCSP - URI:http://ocsp.digicert.com
                CA Issuers - URI:http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar  6 19:29:05.581 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:89:59:F3:93:69:B0:1A:65:E2:02:E7:
                                CC:55:B6:B4:91:FE:E1:F7:AA:E8:CC:99:F7:20:DE:C8:
                                B0:DF:4F:CA:7B:02:21:00:D8:8A:ED:4D:FD:D4:63:6C:
                                1C:09:C8:FD:3C:DC:00:7C:8F:07:6D:7F:AA:B2:63:DC:
                                0B:B0:66:D0:7B:35:0C:D4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar  6 19:29:05.458 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C5:E5:4E:3E:56:3B:AB:7E:2F:EC:D1:
                                B3:12:56:44:75:2B:B9:55:D1:59:05:79:CF:91:53:C0:
                                99:DF:B3:E4:60:02:21:00:AE:FB:DB:F6:05:B0:90:B4:
                                63:0A:4B:DA:B8:51:35:B7:F3:4B:CD:83:3E:BE:21:1F:
                                34:8F:86:3F:9E:33:B0:6B
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar  6 19:29:05.480 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:DE:75:76:C1:AE:75:C1:1B:AC:54:33:
                                16:04:9C:86:B9:4E:CB:E7:19:8F:18:A6:EA:9E:06:36:
                                E5:1F:4E:54:11:02:21:00:CA:E0:81:D6:55:C6:D9:7D:
                                DA:A0:CA:5A:78:C1:69:0E:D2:7F:BE:FA:2E:FE:0D:76:
                                9A:87:09:17:39:8F:AE:98
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        6c:34:8e:b0:da:cf:87:a5:78:b5:14:06:96:d5:34:e0:11:f5:
        97:2c:85:08:26:70:3e:c1:c4:86:8f:fc:84:dd:77:f9:7e:21:
        14:fb:04:50:7e:32:91:14:89:fc:1e:32:98:34:72:f5:53:56:
        83:c2:ff:f0:ab:b9:ca:4a:cf:44:d7:3c:02:38:bb:e5:6d:84:
        84:82:14:b2:6e:06:4e:0f:b1:80:6d:64:cc:93:89:4a:48:fd:
        70:ac:a2:e4:ac:32:cf:4b:50:26:90:76:a0:10:ca:26:7e:a8:
        c6:52:74:cd:4a:22:f0:f6:3b:f6:ba:b5:97:64:f3:53:96:ae:
        92:8f:ba:28:54:31:af:f4:af:ec:f2:31:86:61:b6:fe:fb:1a:
        44:ab:32:29:56:f0:7a:ed:41:f1:89:93:1e:f1:40:71:9f:e8:
        d5:9c:87:2f:bb:db:ff:2f:ce:12:82:5a:bc:f6:84:3d:3a:0b:
        84:40:5c:d5:af:8e:0a:26:49:01:a8:88:da:bd:d5:d5:ee:93:
        5b:3a:84:70:af:9f:70:1f:3b:84:45:4d:cd:ae:6b:4a:b4:7b:
        39:37:fd:19:dd:a5:b8:06:29:34:fe:d2:4d:d1:8b:80:76:b5:
        ad:15:50:db:9f:ac:48:36:bb:e8:b8:10:8f:36:85:0d:62:ad:
        00:31:5d:93

168.61.97.7

Last Seen: 2024-04-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-370734890 | 2024-04-16T09:12:01.911813
21 / tcp

Microsoft ftpd

1255762628 | 2024-04-18T18:11:51.532973
80 / tcp

Microsoft IIS httpd10.0

1255762628 | 2024-04-20T01:54:49.717373
443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

168.61.97.7

Last Seen: 2024-04-20

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-370734890 | 2024-04-16T09:12:01.911813 21 / tcp

Microsoft ftpd

1255762628 | 2024-04-18T18:11:51.532973 80 / tcp

Microsoft IIS httpd10.0

1255762628 | 2024-04-20T01:54:49.717373 443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

-370734890 | 2024-04-16T09:12:01.911813
21 / tcp

1255762628 | 2024-04-18T18:11:51.532973
80 / tcp

1255762628 | 2024-04-20T01:54:49.717373
443 / tcp