CVE-2009-2453: Citrix Presentation Server

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.

Affected products

• Citrix Presentation Server: version 4.5 only
• Citrix Xenapp: version 4.5 only

Published 2009-07-14. Last modified 2026-06-16.