经典 ASP 应用程序是我们环境的安全漏洞吗?

Is a classic ASP application a security vulnerability for our environment?

如果是,是通过什么方式?

ASP是否还在维护安全漏洞?

Classic ASP 是 IIS 的一部分,因此只要您的环境 运行 在受支持的 IIS/OS 版本上,它就会包含在 Microsoft 的补丁中。

Active Server Pages (ASP) enables web servers to dynamically generate webpages and create interactive web applications by using server-side scripting technology. The use of ASP pages with Microsoft Internet Information Services (IIS) is currently supported in all supported versions of IIS.

IIS is included in Windows operating systems, and therefore both ASP and IIS support lifetimes are tied to the support lifecycle of the host operating system.

https://support.microsoft.com/en-us/help/2669020/active-server-pages-asp-support-in-windows

经典 ASP 应用程序可能包含安全漏洞,这些漏洞会使环境面临安全风险,但这些是应用程序中的缺陷,而不是经典 ASP/IIS。