GeneralInformation

Hostnames	bea.gov
Domains	bea.gov
Country	United States
City	Rockville
Organization	U.S. Department of Commerce, Bureau of Economic Analysis
ISP	U.S. Department of Commerce, Bureau of Economic Analysis
ASN	AS3635
Operating System	Windows

WebTechnologies

Analytics

CDN

JavaScript libraries

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-8331	4.3In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-20677	4.3In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
CVE-2018-20676	4.3In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

OpenPorts

80 443

-979213144 | 2024-06-05T22:10:12.965624

80 / tcp

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://192.149.12.17/
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Wed, 05 Jun 2024 22:10:12 GMT
Content-Length: 145

605202316 | 2024-06-05T19:15:14.414923

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Date: Wed, 05 Jun 2024 19:15:13 GMT
Content-Length: 22891

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:93:ac:46:84:b5:0a:fd:88:57:ed:3a:d3:da:1f:1e
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
        Validity
            Not Before: Mar 28 00:00:00 2024 GMT
            Not After : Apr  9 23:59:59 2025 GMT
        Subject: C=US, ST=Maryland, L=Hillcrest Heights, O=Bureau of Economic Analysis, CN=*.bea.gov
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ee:86:a5:be:92:65:32:59:1b:ec:65:5c:e4:bd:
                    a9:a7:9d:c9:d9:5d:e8:b7:65:f6:72:1d:30:2f:93:
                    99:9e:a4:a8:11:ca:45:33:1a:35:c1:60:54:8f:1c:
                    4e:78:ae:1f:9c:66:c9:78:f0:f3:6c:fb:fe:2f:48:
                    8b:db:1f:09:82:02:23:a4:9b:80:74:25:4c:f8:49:
                    53:01:4f:a8:d3:4a:93:80:0b:39:a3:1a:dd:c8:a0:
                    e7:a8:a0:c6:91:46:7d:7e:2e:96:4c:6d:1b:be:01:
                    69:7f:cf:19:7c:c2:dd:af:87:75:0a:e5:a2:fb:97:
                    02:ba:6e:20:9d:54:01:03:0b:78:52:26:81:1f:24:
                    08:1c:5a:71:04:e0:0d:6a:86:2e:a5:21:88:7d:19:
                    ea:db:45:91:b5:f0:80:24:6d:63:ad:4c:12:8d:18:
                    c2:a5:10:5e:33:d4:c8:31:91:33:0e:7b:d3:4b:6f:
                    52:7d:3e:45:50:68:75:e3:c9:8e:9b:cb:d4:cb:f0:
                    cc:ce:0b:00:f2:7e:e1:91:25:33:31:33:c4:58:44:
                    5c:4e:1e:88:c7:32:a9:b4:22:6a:4f:1c:77:14:f1:
                    1d:3c:95:e4:9a:3a:d2:fa:d0:59:5e:5c:fc:3f:15:
                    da:f2:19:04:5b:01:1f:f8:af:26:d8:33:9f:2f:3f:
                    2a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                94:4F:D4:5D:8B:E4:A4:E2:A6:80:FE:FD:D8:F9:00:EF:A3:BE:02:57
            X509v3 Subject Key Identifier: 
                3F:D4:7E:EE:CA:2E:69:21:7D:13:3A:45:E1:C2:92:CB:55:43:DD:5E
            X509v3 Subject Alternative Name: 
                DNS:*.bea.gov, DNS:bea.gov
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.2
                  CPS: http://www.digicert.com/CPS
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
            Authority Information Access: 
                OCSP - URI:http://status.geotrust.com
                CA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
            X509v3 Basic Constraints: critical
                CA:FALSE
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Mar 28 18:35:57.618 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:C0:56:E7:18:C1:9E:C3:05:32:B2:CE:
                                E2:B5:49:A4:3F:62:6F:A4:30:AD:0E:A4:A3:87:9A:07:
                                00:57:EF:B0:A0:02:21:00:BD:03:2B:29:F3:A4:AA:36:
                                37:10:F8:05:1A:D8:94:4B:08:5E:89:C1:7E:89:18:B8:
                                17:A5:E3:62:7B:EE:D5:D6
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 28 18:35:57.518 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:35:75:1F:85:50:9F:80:16:04:AD:8F:EF:
                                A3:BA:A8:DD:3A:63:C6:7A:6C:E2:C8:9D:40:5C:FB:E8:
                                19:3D:FC:87:02:21:00:F1:29:71:49:25:45:9F:6A:66:
                                E4:6B:31:B3:47:81:94:F9:94:5F:FF:BE:32:6B:7A:2B:
                                C5:3D:21:A8:8F:4A:11
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
                                D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
                    Timestamp : Mar 28 18:35:57.550 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:B2:31:4D:E1:43:77:51:80:23:17:B4:
                                16:90:89:09:88:CC:33:23:76:5E:8B:34:20:78:B5:7C:
                                ED:93:64:73:A5:02:21:00:F2:1C:9D:CD:15:1B:E3:9D:
                                96:02:39:76:DC:CE:50:8A:F6:72:32:10:02:ED:F3:3A:
                                AA:4B:F4:3C:D3:52:CA:95
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        06:b2:b3:15:f2:a3:8f:47:91:a7:bc:a5:76:ba:f5:c4:cc:59:
        f2:b1:5b:37:16:63:6e:74:4e:fd:76:b4:38:d2:83:87:52:ff:
        bd:41:df:b2:79:a1:5b:d7:03:9d:29:27:f3:ca:6c:89:36:59:
        64:26:7b:42:e4:be:33:40:62:f4:3d:18:18:2e:c1:04:dd:96:
        22:c0:d1:d4:15:1e:d5:d3:fc:3c:41:f0:2e:12:43:67:90:1b:
        8b:7f:88:72:3f:6c:7c:ef:ab:8c:c8:55:9a:ef:fd:2b:7b:59:
        8c:69:4a:42:4a:1a:bd:51:d6:a5:0e:95:75:d7:e3:d5:cc:56:
        ae:e8:e7:5a:0c:be:1f:01:95:f0:05:44:c6:2c:31:be:3c:a9:
        b7:b2:fc:8b:f4:2c:54:a7:5c:95:f1:34:19:bd:0c:3f:a5:d4:
        d9:88:89:e6:6d:08:12:ad:d8:fe:3c:31:5a:8c:e8:82:de:e7:
        d2:c3:ac:f1:8d:9f:f5:09:92:01:8d:ef:94:1d:2f:3e:8e:37:
        50:09:b7:a7:c2:72:2c:14:cf:d1:0c:60:e4:08:ac:be:dd:bd:
        3e:5f:c7:e6:39:48:21:c6:05:56:ec:14:6d:c0:45:70:83:11:
        b2:c8:0f:23:d8:49:9c:29:52:7a:1d:c4:71:5f:0f:33:39:01:
        cf:fc:e2:30

192.149.12.17

Last Seen: 2024-06-05

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-979213144 | 2024-06-05T22:10:12.965624
80 / tcp

Microsoft IIS httpd10.0

605202316 | 2024-06-05T19:15:14.414923
443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

192.149.12.17

Last Seen: 2024-06-05

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-979213144 | 2024-06-05T22:10:12.965624 80 / tcp

Microsoft IIS httpd10.0

605202316 | 2024-06-05T19:15:14.414923 443 / tcp

Microsoft IIS httpd10.0

Products

Pricing

Contact Us

-979213144 | 2024-06-05T22:10:12.965624
80 / tcp

605202316 | 2024-06-05T19:15:14.414923
443 / tcp