system
Identify the affected product in <CVE-2019-12406>.
user
Which product is affected by <CVE-2019-12406>?
assistant
The affected product is Apache CXF and version: Apache CXF versions before 3.3.4 and 3.2.11.