CXF 3.1.12 Cannot create a secure XMLInputFactory

I’m getting a “Cannot create a secure XMLInputFactory” error when sending a request with SoapUI, i tried some of the stackoverflow mentioned solutions like adding woodstox and stax2-api, but the issue persists

from build.gradle:

compile 'org.codehaus.woodstox:woodstox-core-asl:4.4.1'
compile 'org.codehaus.woodstox:stax2-api:4.0.0'

compile 'org.apache.cxf:cxf-rt-frontend-jaxws:3.1.12'
compile 'org.apache.cxf:cxf-rt-ws-security:3.1.12'
compile 'org.apache.cxf:cxf-rt-transports-http:3.1.12'

it was working before with woodstox-core, but started to throw the error

compile 'com.fasterxml.woodstox:woodstox-core:5.0.3'

from previous solutions from version 3 CXF does not even require woodstox, i tried also without woodstox.

Could it be any other dependency updated like axis2?
What should be my next steps to find out? thanks

Note: using tomcat 8.5.19

So solution found, at SaxUtils.java as someone mentioned there is a

factory = XMLInputFactory.newInstance();

Where we can see from where it is loaded.

There was actually a conflict in axis2 so by excluding neethi

compile('org.apache.axis2:axis2-transport-http:1.5.1') {
    exclude group: 'javax.servlet', module: 'servlet-api'
    exclude module: 'XmlSchema'
    exclude group: 'org.apache.neethi', module: 'neethi'
    exclude group: 'org.codehaus.woodstox'
}
runtime ('org.apache.axis2:axis2-transport-local:1.5.1'){
    exclude group: 'org.codehaus.woodstox', module: 'wstx-asl'
}

the conflict was gone.