system
Identify the affected product in <CVE-2019-12400>.
user
Which product is affected by <CVE-2019-12400>?
assistant
The affected product is Apache Santuario - XML Security for Java and version: All 2.0.x releases from 2.0.3, all 2.1.x releases before 2.1.4..