CVE-2009-2213

6.5 mediumEPSS 2.0%

Medium (6.5) in citrix. EPSS 2.0% chance of exploitation in the next 30 days.

The default configuration of the Security global settings on the Citrix NetScaler Access Gateway appliance with Enterprise Edition firmware 9.0, 8.1, and earlier specifies Allow for the Default Authorization Action option, which might allow remote authenticated users to bypass intended access restrictions.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.0% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2009-06-25
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

citrix:netscaler_access_gateway
citrix:netscaler_access_gateway_firmware

References

http://support.citrix.com/article/CTX118770
http://www.securityfocus.com/bid/35422
http://www.vupen.com/english/advisories/2009/1641
https://exchange.xforce.ibmcloud.com/vulnerabilities/51274
http://support.citrix.com/article/CTX118770

Check your stack JSON