system
Identify the affected product in <CVE-2017-3156>.
user
Which product is affected by <CVE-2017-3156>?
assistant
The affected product is Apache CXF and version: prior to 3.0.13, 3.1.x prior to 3.1.10.