system
Identify the affected product in <CVE-2020-1954>.
user
Which product is affected by <CVE-2020-1954>?
assistant
The affected product is Apache CXF and version: affects all versions prior to 3.3.6 and 3.2.13.