GeneralInformation

Cloud Provider	Azure
Cloud Service	AzureAppService
Country	United States
City	Des Moines
Organization	Microsoft Corporation
ISP	Microsoft Corporation
ASN	AS8075

WebTechnologies

CDN

JavaScript libraries

Miscellaneous

UI frameworks

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2020-23064	Cross Site Scripting vulnerability in jQuery 2.2.0 through 3.x before 3.5.0 allows a remote attacker to execute arbitrary code via the <options> element.
CVE-2020-11023	4.3In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022	4.3In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-11358	4.3jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-18405	4.3jQuery v2.2.2 allows XSS via a crafted onerror attribute of an IMG element. NOTE: this vulnerability has been reported to be spam entry
CVE-2015-9251	4.3jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

OpenPorts

80 443

-750069857 | 2024-04-25T01:03:14.083435

80 / tcp

HTTP/1.1 200 OK
Content-Length: 10864
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 01:03:13 GMT
Server: gunicorn
Set-Cookie: ARRAffinity=b52a0e95239a69ec1d51e27f609b0a5686f7c63777a6973635d661be711de39f;Path=/;HttpOnly;Domain=satellitemind-webapp.azurewebsites.net

46968843 | 2024-04-25T01:12:46.441744

443 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Date: Thu, 25 Apr 2024 01:12:46 GMT
Server: nginx/1.24.0
Set-Cookie: ARRAffinity=b221d2bf0dbbaf2d2f98fe57e1fedd5a08bfd249c074ab266ffa197db13e332c;Path=/;HttpOnly;Secure;Domain=corrstaffdirectory.azurewebsites.net
Set-Cookie: ARRAffinitySameSite=b221d2bf0dbbaf2d2f98fe57e1fedd5a08bfd249c074ab266ffa197db13e332c;Path=/;HttpOnly;SameSite=None;Secure;Domain=corrstaffdirectory.azurewebsites.net
Transfer-Encoding: chunked
X-Powered-By: PHP/8.2.14

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:00:1f:bc:5f:84:68:40:88:5a:69:fd:af:00:00:00:1f:bc:5f
        Signature Algorithm: sha384WithRSAEncryption
        Issuer: C=US, O=Microsoft Corporation, CN=Microsoft Azure RSA TLS Issuing CA 08
        Validity
            Not Before: Mar 13 01:29:45 2024 GMT
            Not After : Mar  8 01:29:45 2025 GMT
        Subject: C=US, ST=WA, L=Redmond, O=Microsoft Corporation, CN=*.azurewebsites.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:57:89:62:e2:b8:22:2a:76:f7:d7:e4:0b:
                    ad:1e:7b:ae:c1:bf:5a:d2:c4:cf:d9:c9:08:b6:91:
                    36:93:f2:d6:75:24:4d:72:61:25:53:b4:ff:af:e1:
                    ac:74:1a:ef:7a:f3:6d:92:95:a5:d6:89:8e:14:d6:
                    79:8a:77:97:d2:73:8c:e4:b6:42:4e:63:88:48:8f:
                    59:22:4d:a0:13:85:6f:88:fb:31:ea:85:25:d1:78:
                    f4:1b:b8:66:48:c3:44:ec:e6:0f:97:ab:82:7a:4b:
                    53:7b:0e:5f:17:7b:53:ec:b2:ef:8c:35:e3:dd:b9:
                    4c:fa:12:dd:38:86:62:d3:f4:8d:aa:5f:5c:c5:e2:
                    c5:6c:f9:eb:fa:dd:7a:d0:10:e0:d2:6f:11:bf:51:
                    74:de:2d:19:d8:fd:35:85:1f:63:36:4e:47:5f:43:
                    e7:97:fa:98:c9:8f:be:2f:63:36:87:f7:c7:77:b6:
                    a5:4e:fd:0d:87:13:37:a0:ba:18:c6:35:5c:2c:35:
                    fe:65:63:00:2b:1b:83:1b:f9:14:12:68:2e:ca:96:
                    b3:11:f2:06:2e:92:fa:fd:75:c4:e5:6a:4c:ee:d1:
                    e2:57:67:e4:37:ac:f5:42:ff:a7:a0:32:36:80:24:
                    c6:c4:99:40:fa:c8:78:97:ab:9d:6c:61:41:92:d3:
                    e2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Mar 13 01:39:48.337 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:0B:25:95:A5:17:2B:33:F7:CB:D9:7A:73:
                                BE:9D:CD:A6:01:EC:D8:E2:A8:7D:80:27:4E:29:23:02:
                                92:49:82:6C:02:20:5C:27:B6:36:E2:6C:31:F0:AF:68:
                                29:BF:45:94:D1:DB:B5:A0:FB:14:FD:CF:C5:B6:05:EF:
                                16:43:F0:8C:D0:B4
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Mar 13 01:39:48.569 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:B2:63:D5:ED:C0:8B:5F:F9:FB:C4:3A:
                                03:8B:41:0C:08:7D:DD:2C:E6:78:20:48:B7:3F:5F:81:
                                9C:36:FC:0F:E6:02:20:3E:36:18:C2:2A:ED:0F:36:F3:
                                84:DD:73:E4:1F:74:D8:A7:BC:F6:FD:96:AD:01:08:0E:
                                73:AD:C2:DF:96:86:CE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 55:81:D4:C2:16:90:36:01:4A:EA:0B:9B:57:3C:53:F0:
                                C0:E4:38:78:70:25:08:17:2F:A3:AA:1D:07:13:D3:0C
                    Timestamp : Mar 13 01:39:48.570 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:48:FE:21:29:98:92:77:AF:4E:6E:EE:7C:
                                7C:19:48:83:3A:2F:6F:68:FC:85:D1:54:73:B0:F5:E3:
                                A3:6C:B2:1F:02:20:0F:FC:4E:72:37:36:F6:26:72:3C:
                                FE:25:66:0F:8D:32:72:86:F7:17:98:9A:65:78:6A:20:
                                96:C2:DB:D6:66:E1
            Microsoft Application Policies Extension: 
                0.0
..+.......0
..+.......
            Microsoft certificate template: 
                0-.%+.....7.........F...........]...i...>..d..&
            Authority Information Access: 
                CA Issuers - URI:http://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008%20-%20xsign.crt
                OCSP - URI:http://oneocsp.microsoft.com/ocsp
            X509v3 Subject Key Identifier: 
                16:56:62:84:D6:A3:EA:72:91:C3:EB:78:D7:99:39:6E:06:E6:C4:69
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Subject Alternative Name: 
                DNS:*.azurewebsites.net, DNS:*.scm.azurewebsites.net, DNS:*.sso.azurewebsites.net, DNS:*.centralus-01.azurewebsites.net, DNS:*.scm.centralus-01.azurewebsites.net, DNS:*.sso.centralus-01.azurewebsites.net, DNS:*.centralus.c.azurewebsites.net, DNS:*.scm.centralus.c.azurewebsites.net, DNS:*.sso.centralus.c.azurewebsites.net, DNS:*.azure-mobile.net, DNS:*.scm.azure-mobile.net
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://www.microsoft.com/pkiops/crl/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2008.crl
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.311.76.509.1.1
                  CPS: http://www.microsoft.com/pkiops/Docs/Repository.htm
                Policy: 2.23.140.1.2.2
            X509v3 Authority Key Identifier: 
                F6:7E:2F:BD:80:A3:4A:B2:70:5B:EB:DF:9A:1F:D8:ED:CA:61:80:07
            X509v3 Extended Key Usage: 
                TLS Web Client Authentication, TLS Web Server Authentication
    Signature Algorithm: sha384WithRSAEncryption
    Signature Value:
        27:b7:79:37:5a:41:f5:35:53:18:dd:96:21:cb:81:78:88:d7:
        88:98:40:41:b8:3b:c4:68:0f:cd:97:2b:20:dc:a4:74:bd:90:
        08:32:b0:48:1c:d6:2e:e7:fe:32:e3:49:35:0a:5b:f6:82:1b:
        90:81:ea:40:4c:e1:e4:7f:f0:e3:f9:85:d7:61:8d:3b:3d:48:
        31:a5:30:c0:d2:e5:ae:94:a2:02:9b:eb:33:e2:14:e8:af:29:
        99:81:ee:52:49:fb:4e:b2:bf:03:55:26:79:aa:42:43:18:04:
        97:9e:8f:2f:e7:f9:13:08:9a:bf:1c:5c:64:4f:0c:c9:c9:3d:
        f6:f9:3f:7e:91:c5:a5:12:ae:d3:5c:f2:fd:90:e4:11:ca:e9:
        ee:c8:cb:d2:69:d8:56:1d:f4:db:e0:9d:f5:83:ce:e1:48:1d:
        bb:b2:95:ae:8f:d0:47:de:3a:05:95:d2:8f:ae:f0:e2:30:e7:
        6e:eb:40:09:15:ba:1c:fa:94:33:53:a9:97:33:c1:0d:18:a9:
        5f:29:eb:8c:4d:a7:68:81:9a:34:87:d8:84:c1:42:67:e4:73:
        90:6f:49:41:78:be:45:d9:e3:3c:2b:8f:8a:7f:13:73:e9:be:
        ed:6b:2f:c9:c5:4a:d8:7c:37:0e:bd:76:a1:0d:15:44:c5:07:
        f3:60:42:2d:63:81:e5:e5:71:b3:08:21:d0:7b:29:51:14:98:
        8b:0e:21:c2:1b:93:38:9c:e0:bb:42:cd:84:2c:9f:6e:3d:22:
        86:a8:58:06:93:f4:4c:b5:c4:ca:e4:8f:fe:90:2b:79:61:db:
        9e:dd:78:d7:86:58:73:58:55:c1:39:fe:71:5a:56:14:e6:9a:
        0b:fe:8f:b6:77:06:09:71:66:ff:63:e1:07:33:3b:df:ec:0f:
        99:c5:28:59:cd:dc:59:8c:f7:cd:b1:74:89:81:bb:8d:4f:cc:
        eb:2e:8c:0b:f6:85:f9:d8:87:de:ad:be:ef:2b:d9:de:0b:f1:
        b7:77:6b:1b:1c:21:a2:58:f6:d4:e3:15:64:5b:50:3f:f6:7b:
        2a:96:8a:39:bc:bc:99:17:cb:eb:80:40:c8:f3:91:e9:62:39:
        69:6e:0a:0d:33:56:b5:3b:ca:16:52:3e:ca:e5:10:fc:3f:c9:
        e3:92:06:85:8f:14:06:42:22:1d:1d:73:78:d6:ce:be:1a:ec:
        56:3e:9b:c0:42:70:e1:a2:ec:e8:60:cd:69:22:c8:72:97:e2:
        f7:e8:70:55:d5:7c:17:f7:b2:43:df:b4:30:02:5d:19:31:ff:
        0e:3a:cc:e0:01:9c:55:df:83:2e:ea:c7:e1:a8:40:27:d6:ac:
        15:92:76:0a:ce:6b:f4:73

40.122.114.229

Last Seen: 2024-04-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-750069857 | 2024-04-25T01:03:14.083435
80 / tcp

46968843 | 2024-04-25T01:12:46.441744
443 / tcp

nginx1.24.0

Products

Pricing

Contact Us

40.122.114.229

Last Seen: 2024-04-25

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-750069857 | 2024-04-25T01:03:14.083435 80 / tcp

46968843 | 2024-04-25T01:12:46.441744 443 / tcp

nginx1.24.0

Products

Pricing

Contact Us

-750069857 | 2024-04-25T01:03:14.083435
80 / tcp

46968843 | 2024-04-25T01:12:46.441744
443 / tcp