Skip to content
CVE Tracker
Back

CVE-2011-2159

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to…

High10.0EPSS 4.4%
Published
Updated
Reserved
Assigned by
mitre

Description

The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/Defaults/frmDefaultSiteSettings.aspx, (2) Admin/Defaults/frmServerDefaults.aspx, (3) Admin/frmReportSettings.aspx, (4) Admin/frmSite.aspx, (5) App_Themes/Default/ButtonBarIcons.xml, (6) App_Themes/Default/Skin.xml, (7) Client/frmImportSettings.aspx, (8) Client/frmSeoSettings.aspx, (9) Services/Web.config, (10) aspnet_client/system_web/4_0_30319/, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.

Scores

CVSS scores of CVE-2011-2159, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified2.0High10.0AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS (exploitation in 30 days)
4.4% · top 8.7% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 10.0.

Weakness

  • n/a

Affected products

  • n/a

    • affected n/a

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .