LeakIX - Host prod4.propos-software.com

Domain prod4.propos-software.com

United States

AMAZON-02

Software information

Heroku

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 52.223.53.203
Domain: prod4.propos-software.com
Port: 443
URL: https://prod4.propos-software.com

First seen 2025-10-15 00:45
Last seen 2026-01-09 06:51
Open for 86 days

Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b0e0cff557faf4ce1df457c16b4a268ca54f49a1c

Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /extapi/v1/production-orders/multiple
DELETE /extapi/v1/rosters
GET /extapi/v1/attachments
GET /extapi/v1/attachments/production-order
GET /extapi/v1/attachments/production-order/{productionOrderCode}
GET /extapi/v1/attachments/{code}
GET /extapi/v1/authenticate
GET /extapi/v1/cells
GET /extapi/v1/employees
GET /extapi/v1/internaltransport/deliverylocations
GET /extapi/v1/licenses/activeusers
GET /extapi/v1/licenses/modules
GET /extapi/v1/links/production-order
GET /extapi/v1/load-balancing/routes/polca
GET /extapi/v1/material-bookings/search
GET /extapi/v1/material-inventories
GET /extapi/v1/material-inventories/all
GET /extapi/v1/materials/search
GET /extapi/v1/po-batches
GET /extapi/v1/po-batches/search
GET /extapi/v1/po-batches/{productionOrderCode}/{poBatchCode}
GET /extapi/v1/produced-quantity-bookings/search
GET /extapi/v1/production-orders
GET /extapi/v1/production-orders/search
GET /extapi/v1/production-orders/{code}
GET /extapi/v1/report/capacity
GET /extapi/v1/report/planned-orders
GET /extapi/v1/report/po-batches/closed
GET /extapi/v1/report/po-batches/open
GET /extapi/v1/report/po-cell-operations/search
GET /extapi/v1/resources
GET /extapi/v1/rosters/search
GET /extapi/v1/time-clockings/search
GET /extapi/v1/time-clockings/search-closed
POST /extapi/v1/links
POST /extapi/v1/materials
POST /extapi/v1/planningmarkers
POST /extapi/v1/produced-quantity-bookings
POST /extapi/v1/time-clockings
PUT /extapi/v1/po-batches/block
PUT /extapi/v1/po-batches/rollback
PUT /extapi/v1/po-batches/rollforward
PUT /extapi/v1/po-batches/{productionOrderCode}/{poBatchCode}/rollback
PUT /extapi/v1/po-batches/{productionOrderCode}/{poBatchCode}/rollforward
PUT /extapi/v1/time-clockings/clock-in
PUT /extapi/v1/time-clockings/clock-out

Found on 2026-01-09 06:51

Create report

Open service 52.223.53.203:443 · prod4.propos-software.com

2026-01-09 06:51

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 1712
Content-Security-Policy: default-src 'self'; frame-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:
Content-Type: text/html
Date: Fri, 09 Jan 2026 06:51:48 GMT
Expires: 0
Last-Modified: Tue, 06 Jan 2026 15:37:14 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zlYgbIEjyVcQUn8XGmb0datn1sX6XptjR0Az3kmHzWU%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767941508"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zlYgbIEjyVcQUn8XGmb0datn1sX6XptjR0Az3kmHzWU%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767941508"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Version: 6ad9c88
X-Xss-Protection: 0
Connection: close

Page title: PROPOS 4.0

<!doctype html><html class="no-js" lang="en" dir="ltr"><head><base href="/"/><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>PROPOS 4.0</title><meta name="description" content="propos2020"><meta name="google" content="notranslate"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="shortcut icon" href="favicon.ico"/><link rel="manifest" href="manifest.webapp"/><link rel="stylesheet" href="content/css/loading.css"><script>window.FabricConfig = {
            fontBaseUrl: ''
        };</script><base href="/"><link href="content/main.df7c551f8d19ddd0d1d0.css" rel="stylesheet"></head><body><!--[if lt IE 9]>
        <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]--><div id="root" style="height:100%"><div class="app-loading"><div class="lds-css ng-scope"><div><div><div></div><div></div><div></div></div><div><div></div><div></div><div></div></div></div></div></div><div class="app-loading"><div id="jhipster-error" style="display:none"><h1>An error has occurred :-(</h1></div></div></div><noscript><h1>You must enable javascript to view this page.</h1></noscript><script>window.onload=function() {
            setTimeout(showError, 4000);
        }
        function showError() {
            var errorElm = document.getElementById("jhipster-error");
            if (errorElm && errorElm.style) {
                errorElm.style.display = "block";
            }
        }</script><script defer="defer" src="main.850d3c8b.js"></script></body></html>

Found 2026-01-09 by HttpPlugin

Create report

Open service 52.223.53.203:443 · prod4.propos-software.com

2026-01-02 08:14

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 1712
Content-Security-Policy: default-src 'self'; frame-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:
Content-Type: text/html
Date: Fri, 02 Jan 2026 08:14:29 GMT
Expires: 0
Last-Modified: Tue, 09 Dec 2025 13:09:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=ei8nbD3x0Xm8xKGSVW0B0JugNAtnKYqUExR2F9LMqmM%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767341669"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=ei8nbD3x0Xm8xKGSVW0B0JugNAtnKYqUExR2F9LMqmM%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767341669"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Version: 50a2c32
X-Xss-Protection: 0
Connection: close

Page title: PROPOS 4.0

<!doctype html><html class="no-js" lang="en" dir="ltr"><head><base href="/"/><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>PROPOS 4.0</title><meta name="description" content="propos2020"><meta name="google" content="notranslate"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="shortcut icon" href="favicon.ico"/><link rel="manifest" href="manifest.webapp"/><link rel="stylesheet" href="content/css/loading.css"><script>window.FabricConfig = {
            fontBaseUrl: ''
        };</script><base href="/"><link href="content/main.df7c551f8d19ddd0d1d0.css" rel="stylesheet"></head><body><!--[if lt IE 9]>
        <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]--><div id="root" style="height:100%"><div class="app-loading"><div class="lds-css ng-scope"><div><div><div></div><div></div><div></div></div><div><div></div><div></div><div></div></div></div></div></div><div class="app-loading"><div id="jhipster-error" style="display:none"><h1>An error has occurred :-(</h1></div></div></div><noscript><h1>You must enable javascript to view this page.</h1></noscript><script>window.onload=function() {
            setTimeout(showError, 4000);
        }
        function showError() {
            var errorElm = document.getElementById("jhipster-error");
            if (errorElm && errorElm.style) {
                errorElm.style.display = "block";
            }
        }</script><script defer="defer" src="main.328f0d8b.js"></script></body></html>

Found 2026-01-02 by HttpPlugin

Create report

Open service 52.223.53.203:443 · prod4.propos-software.com

2025-12-22 10:27

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 1712
Content-Security-Policy: default-src 'self'; frame-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:
Content-Type: text/html
Date: Mon, 22 Dec 2025 10:27:13 GMT
Expires: 0
Last-Modified: Tue, 09 Dec 2025 13:09:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=NT6wj%2FX%2FU6YBCKaFD38%2Fqpf7%2BaC8eLwR4%2FIO%2FGKjyPA%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766399233"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=NT6wj%2FX%2FU6YBCKaFD38%2Fqpf7%2BaC8eLwR4%2FIO%2FGKjyPA%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766399233"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Version: 50a2c32
X-Xss-Protection: 0
Connection: close

Page title: PROPOS 4.0

<!doctype html><html class="no-js" lang="en" dir="ltr"><head><base href="/"/><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>PROPOS 4.0</title><meta name="description" content="propos2020"><meta name="google" content="notranslate"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="shortcut icon" href="favicon.ico"/><link rel="manifest" href="manifest.webapp"/><link rel="stylesheet" href="content/css/loading.css"><script>window.FabricConfig = {
            fontBaseUrl: ''
        };</script><base href="/"><link href="content/main.df7c551f8d19ddd0d1d0.css" rel="stylesheet"></head><body><!--[if lt IE 9]>
        <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]--><div id="root" style="height:100%"><div class="app-loading"><div class="lds-css ng-scope"><div><div><div></div><div></div><div></div></div><div><div></div><div></div><div></div></div></div></div></div><div class="app-loading"><div id="jhipster-error" style="display:none"><h1>An error has occurred :-(</h1></div></div></div><noscript><h1>You must enable javascript to view this page.</h1></noscript><script>window.onload=function() {
            setTimeout(showError, 4000);
        }
        function showError() {
            var errorElm = document.getElementById("jhipster-error");
            if (errorElm && errorElm.style) {
                errorElm.style.display = "block";
            }
        }</script><script defer="defer" src="main.328f0d8b.js"></script></body></html>

Found 2025-12-22 by HttpPlugin

Create report

Open service 52.223.53.203:443 · prod4.propos-software.com

2025-12-21 11:03

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 1712
Content-Security-Policy: default-src 'self'; frame-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:
Content-Type: text/html
Date: Sun, 21 Dec 2025 11:03:31 GMT
Expires: 0
Last-Modified: Tue, 09 Dec 2025 13:09:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XFUGzX78OZrptVsFZ6akO3REGGOZNdf9OMp51z%2BZ21I%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766315011"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XFUGzX78OZrptVsFZ6akO3REGGOZNdf9OMp51z%2BZ21I%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766315011"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Version: 50a2c32
X-Xss-Protection: 0
Connection: close

Page title: PROPOS 4.0

<!doctype html><html class="no-js" lang="en" dir="ltr"><head><base href="/"/><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>PROPOS 4.0</title><meta name="description" content="propos2020"><meta name="google" content="notranslate"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="shortcut icon" href="favicon.ico"/><link rel="manifest" href="manifest.webapp"/><link rel="stylesheet" href="content/css/loading.css"><script>window.FabricConfig = {
            fontBaseUrl: ''
        };</script><base href="/"><link href="content/main.df7c551f8d19ddd0d1d0.css" rel="stylesheet"></head><body><!--[if lt IE 9]>
        <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]--><div id="root" style="height:100%"><div class="app-loading"><div class="lds-css ng-scope"><div><div><div></div><div></div><div></div></div><div><div></div><div></div><div></div></div></div></div></div><div class="app-loading"><div id="jhipster-error" style="display:none"><h1>An error has occurred :-(</h1></div></div></div><noscript><h1>You must enable javascript to view this page.</h1></noscript><script>window.onload=function() {
            setTimeout(showError, 4000);
        }
        function showError() {
            var errorElm = document.getElementById("jhipster-error");
            if (errorElm && errorElm.style) {
                errorElm.style.display = "block";
            }
        }</script><script defer="defer" src="main.328f0d8b.js"></script></body></html>

Found 2025-12-21 by HttpPlugin

Create report

Open service 52.223.53.203:443 · prod4.propos-software.com

2025-12-19 08:05

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Length: 1712
Content-Security-Policy: default-src 'self'; frame-src * data:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self' data:
Content-Type: text/html
Date: Fri, 19 Dec 2025 08:05:07 GMT
Expires: 0
Last-Modified: Tue, 09 Dec 2025 13:09:06 GMT
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Permissions-Policy: camera=(), fullscreen=(self), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), midi=(), payment=(), sync-xhr=()
Pragma: no-cache
Referrer-Policy: strict-origin-when-cross-origin
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=GJYwP3kvoAIdCL31Ls%2FPRzbNEDCTmxqKezxTZY5moKs%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766131507"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=GJYwP3kvoAIdCL31Ls%2FPRzbNEDCTmxqKezxTZY5moKs%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766131507"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Version: 50a2c32
X-Xss-Protection: 0
Connection: close

Page title: PROPOS 4.0

<!doctype html><html class="no-js" lang="en" dir="ltr"><head><base href="/"/><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>PROPOS 4.0</title><meta name="description" content="propos2020"><meta name="google" content="notranslate"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="shortcut icon" href="favicon.ico"/><link rel="manifest" href="manifest.webapp"/><link rel="stylesheet" href="content/css/loading.css"><script>window.FabricConfig = {
            fontBaseUrl: ''
        };</script><base href="/"><link href="content/main.df7c551f8d19ddd0d1d0.css" rel="stylesheet"></head><body><!--[if lt IE 9]>
        <p class="browserupgrade">You are using an <strong>outdated</strong> browser. Please <a href="http://browsehappy.com/">upgrade your browser</a> to improve your experience.</p>
    <![endif]--><div id="root" style="height:100%"><div class="app-loading"><div class="lds-css ng-scope"><div><div><div></div><div></div><div></div></div><div><div></div><div></div><div></div></div></div></div></div><div class="app-loading"><div id="jhipster-error" style="display:none"><h1>An error has occurred :-(</h1></div></div></div><noscript><h1>You must enable javascript to view this page.</h1></noscript><script>window.onload=function() {
            setTimeout(showError, 4000);
        }
        function showError() {
            var errorElm = document.getElementById("jhipster-error");
            if (errorElm && errorElm.style) {
                errorElm.style.display = "block";
            }
        }</script><script defer="defer" src="main.328f0d8b.js"></script></body></html>

Found 2025-12-19 by HttpPlugin

Create report

prod4.propos-software.com

Fingerprint:

474e8b3ab3a0605ceae7531d406da0386b309413ae9e5db5d1b37bf7cad90af8

CN:

prod4.propos-software.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-14 00:02

Not after:

2026-03-14 00:02

Domain summary

prod4.propos-software.com 5

1 recorded

IP summary

52.223.53.203 2

1 recorded

© 2026 LeakIX v2.0.49
About LeakIX - Credits - Take-down and blacklist requests - Security issues - Terms and conditions - Cookie policy - Legal notice