GeneralInformation

Cloud Provider	Azure
Cloud Service	AzureAppService
Country	United States
City	San Jose
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075
Operating System	Windows

WebTechnologies

CDN

Microsoft Ajax Content Delivery Network

JavaScript libraries

jQuery2.2.01.10.2

Modernizr

UI frameworks

Bootstrap3.3.7

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-8331	4.3In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-20677	4.3In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
CVE-2018-20676	4.3In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
CVE-2018-14042	4.3In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14040	4.3In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2016-10735	4.3In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

345462242 | 2024-04-19T16:07:13.532005

80 / tcp

HTTP/1.1 200 OK
Content-Length: 1995
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 16:07:13 GMT
Server: Microsoft-IIS/10.0
Cache-Control: private
Set-Cookie: ai_user=f7a169c1d9544a338e8a4e31dcea3fb6|2024-04-19T16:07:13.2637222+00:00; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/
Set-Cookie: ai_session=e1bf329d770346d3bc463fd8b15d54b3|2024-04-19T16:07:13.2637222+00:00|2024-04-19T16:07:13.2637222+00:00; expires=Fri, 19-Apr-2024 16:37:13 GMT; path=/
Set-Cookie: ARRAffinity=ad26f9a6bd8a60cc0a709ea5aba83deeee69ecdeb9e8ed99f43a1cd50f09889a;Path=/;HttpOnly;Domain=bodco.azurewebsites.net
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET

-1789573153 | 2024-04-19T16:44:13.054386

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Apr 2024 16:44:13 GMT
Server: Kestrel
Set-Cookie: ARRAffinity=57b117fdbad693fbc57505513f794f2f50b333774b21315491f11f2ad02212dd;Path=/;HttpOnly;Secure;Domain=samltestapp2.azurewebsites.net
Set-Cookie: ARRAffinitySameSite=57b117fdbad693fbc57505513f794f2f50b333774b21315491f11f2ad02212dd;Path=/;HttpOnly;SameSite=None;Secure;Domain=samltestapp2.azurewebsites.net
Transfer-Encoding: chunked
X-Powered-By: ASP.NET

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:2c:08:54:a1:5a:32:f4:02:fe:6b:0a:00:00:00:2c:08:54
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 07
        Validity
            Not Before: Mar 13 01:25:33 2024 GMT
            Not After : Mar  8 01:25:33 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=*.azurewebsites.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:c8:12:22:07:7e:4f:68:c4:e5:fd:12:8b:
                    b3:9b:17:cc:02:84:e3:c9:c2:d1:b8:ff:28:12:41:
                    34:d7:b0:d3:b5:00:56:e7:22:30:d1:21:0f:94:6b:
                    6b:0b:61:eb:89:65:65:8d:08:fc:bd:1a:3f:3e:72:
                    ec:2a:11:57:43:70:9f:b0:36:12:de:43:99:f4:21:
                    36:e2:0d:70:79:85:f7:5a:fa:e5:16:5c:e5:7f:67:
                    84:64:9b:e4:7b:39:98:fd:35:28:a1:cc:1c:b8:5f:
                    71:31:44:e1:64:c8:49:b5:e9:3c:5f:50:77:35:15:
                    a2:75:e6:07:13:f4:a1:35:44:6a:39:d5:01:77:6c:
                    85:69:43:41:94:80:c0:e8:68:68:a5:98:69:01:8b:
                    9c:0e:90:da:4d:d8:70:40:28:51:04:d7:76:3a:3e:
                    5d:23:6b:12:3c:e7:24:be:2d:8a:4c:0b:46:8f:12:
                    ce:33:11:12:4a:7d:24:d8:5f:77:14:7f:47:7d:cd:
                    f2:1d:f0:31:53:39:f7:17:b1:b4:c3:c1:28:43:8f:
                    15:06:e2:f6:ae:5b:eb:20:20:58:23:16:53:48:23:
                    19:3f:a4:6b:6d:65:33:c2:08:7a:ac:ef:b1:ec:c3:
                    e2:35:4e:9e:79:56:d0:b3:1f:23:df:6a:bc:02:29:
                    6b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 13 01:35:37.388 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:E3:8E:16:91:69:1D:80:BD:82:B0:49:
                                91:7D:21:AB:C9:ED:15:59:59:7B:A0:20:96:48:4D:9E:
                                93:93:D1:6E:3B:02:20:7F:52:1E:26:1F:76:52:0A:7D:
                                28:9D:1D:89:25:FB:2E:77:36:24:1F:72:FD:72:BA:C5:
                                85:BA:E0:B5:4E:FB:66
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 13 01:35:37.604 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:11:BF:8D:8F:FF:94:31:6D:85:A9:13:88:
                                4B:41:C9:D4:24:02:DE:CB:E3:75:8E:95:D5:91:93:D8:
                                F7:17:50:71:02:20:02:A9:94:C7:94:B4:44:75:35:09:
                                48:E7:0A:C0:8C:5C:40:81:21:A7:CB:11:06:53:D0:4A:
                                64:AC:A7:7E:3B:8E
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
                                C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
                    Timestamp : Mar 13 01:35:37.606 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:CA:FC:B5:0A:7F:E9:88:9D:D4:41:A8:
                                C2:8C:93:CD:B6:8D:C7:78:72:C0:31:CE:E1:C5:E6:9D:
                                63:80:DD:60:BC:02:21:00:DA:72:F1:95:CC:53:D5:BF:
                                50:C2:9B:3B:80:9F:82:10:83:5F:A3:EF:E0:B1:C8:88:
                                0F:29:26:E4:3E:FC:9A:5C
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...i...>..d..&
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                EE:C2:BF:EA:0A:5C:F4:8E:D4:91:BC:75:54:0F:64:40:E7:4F:C0:FF
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.azurewebsites.net, DNS:*.scm.azurewebsites.net, DNS:*.sso.azurewebsites.net, DNS:*.westus-01.azurewebsites.net, DNS:*.scm.westus-01.azurewebsites.net, DNS:*.sso.westus-01.azurewebsites.net, DNS:*.westus.c.azurewebsites.net, DNS:*.scm.westus.c.azurewebsites.net, DNS:*.sso.westus.c.azurewebsites.net, DNS:*.azure-mobile.net, DNS:*.scm.azure-mobile.net
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2007.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                CE:15:16:3B:EA:02:A3:A6:6B:DA:D9:2B:FD:E5:8C:52:BE:7A:50:A8
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        38:c1:a0:f7:79:ef:3e:8e:16:8c:ab:ec:e2:20:e5:11:2a:d2:
        8e:b0:7c:77:7d:89:ba:b5:c1:f1:ef:f4:70:31:47:d9:3f:28:
        af:a4:6e:9f:50:16:9a:9f:f6:67:08:f9:b2:d1:73:96:c4:0f:
        b0:1e:54:e5:92:68:73:04:bc:5b:95:1a:17:a1:a4:18:81:83:
        91:f7:8d:82:ae:63:2e:d4:24:60:9e:4e:2a:07:00:2c:26:78:
        fc:d2:4a:73:96:34:b1:83:15:26:64:11:83:3e:89:a0:5b:58:
        70:68:32:6b:75:a7:fa:47:76:e4:e7:d1:b9:56:64:bf:f3:68:
        98:37:d2:bb:4e:81:77:93:3e:19:d5:7d:72:ca:c6:4b:1e:cc:
        d9:85:cc:2f:33:5e:a8:69:c6:cd:45:63:66:12:3f:2b:a7:9d:
        59:28:8f:f7:67:3a:f5:41:77:90:74:ec:8e:3b:81:48:bc:1e:
        75:27:7e:a4:27:90:ae:37:d0:13:c6:d7:e8:c3:b9:a4:3e:d5:
        ab:1d:2b:27:ea:53:9d:9f:ec:59:90:c6:e8:b2:03:2d:a8:02:
        50:ee:52:db:8a:48:47:26:f2:98:c3:c3:42:af:50:8d:76:22:
        c6:9e:75:8a:ec:06:d4:81:e9:80:83:eb:ac:d9:94:25:59:f9:
        bb:b4:20:d5:46:ad:2b:65:b8:77:3b:22:38:7c:f4:70:c4:55:
        81:c4:52:bf:c8:ca:79:23:4e:e3:4d:83:6a:19:84:fd:33:18:
        5f:44:5c:ca:9d:c0:ee:57:21:1b:50:4f:b0:f2:09:9d:54:c3:
        ab:e4:54:2a:35:2d:59:b1:11:1f:7a:a9:42:24:2b:7c:8a:b0:
        28:30:de:53:7e:d6:d1:84:7d:1b:bc:a1:4c:8b:a4:5d:85:0a:
        b8:a9:af:5b:13:fe:64:29:2f:c9:e8:7e:e0:a9:4a:f3:06:db:
        eb:68:2a:d4:c4:30:2f:d6:67:f2:ce:db:49:e3:32:4f:77:0b:
        e1:58:10:f7:ab:67:dd:a7:08:80:44:9d:0c:22:c6:b3:4d:c9:
        6a:d0:ab:27:69:b7:da:81:b3:b2:e6:19:88:85:38:21:cc:dd:
        73:b3:a2:f5:7b:44:9f:37:8c:fc:88:85:a6:23:bf:07:77:05:
        b0:4a:2c:f7:17:51:16:d0:51:34:d3:00:2a:d3:23:0f:77:e7:
        50:2c:d9:8f:fd:91:47:2f:af:d7:b3:fd:c4:7e:19:96:4b:36:
        3e:39:45:7c:46:26:60:ec:02:62:b7:f2:03:75:a5:7d:d9:05:
        9b:cc:6f:a2:3c:d6:56:ab:84:7b:10:e7:8a:7f:f7:f0:6b:8e:
        79:25:b7:49:74:b4:7e:ef

23.99.65.65

Last Seen: 2024-04-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

345462242 | 2024-04-19T16:07:13.532005
80 / tcp

Microsoft IIS httpd10.0

-1789573153 | 2024-04-19T16:44:13.054386
443 / tcp

Microsoft IIS httpd

Products

Pricing

Contact Us

23.99.65.65

Last Seen: 2024-04-19

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

345462242 | 2024-04-19T16:07:13.532005 80 / tcp

Microsoft IIS httpd10.0

-1789573153 | 2024-04-19T16:44:13.054386 443 / tcp

Microsoft IIS httpd

Products

Pricing

Contact Us

345462242 | 2024-04-19T16:07:13.532005
80 / tcp

-1789573153 | 2024-04-19T16:44:13.054386
443 / tcp