Versions of Katello as shipped with Red Hat Subscription Asset Manager 1.4 are vulnerable to a XSS via HTML in the systems name when registering.Referenceshttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0183https://access.redhat.com/security/cve/cve-2014-0183