CVE-2013-1198: Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Centr...

Security readout for executives and security teams

CVE-2013-1198 is a cross-site scripting issue in a Flash component of Cisco Unified Computing System Central. A remote attacker could inject script or HTML through unspecified vectors. Business risk centers on administrator browser sessions and the management plane, but the source bundle does not provide affected versions, CVSS, or patch details. Exposure is most likely where Cisco UCS Central Software is deployed and its web management interface is reachable by users or networks that should not access it. The provided data does not identify affected versions, so teams must verify Cisco guidance and internal asset records. Handle as a targeted remediation item for infrastructure management systems. It is not KEV-listed in the provided sources, but XSS in a UCS management console can create meaningful operational risk if administrators can be targeted. Mitigation focus: Review Cisco Security Notice CVE-2013-1198 for fixed releases or official workarounds.; Inventory Cisco UCS Central deployments and owners.; Restrict management interface access to trusted administrative networks..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.