The following exception can be observed with JDK JAXB unmarshaller usage and old version of Apache Xerces library in classpath that doesn't support the XMLConstants.FEATURE_SECURE_PROCESSING feature.

Feb 01, 2018 2:15:21 PM com.sun.xml.internal.bind.v2.util.XmlFactory
createParserFactory
SEVERE: null
org.xml.sax.SAXNotRecognizedException:
http://javax.xml.XMLConstants/feature/secure-processing
       at org.apache.xerces.parsers.AbstractSAXParser.setFeature(Unknown
Source)
       at org.apache.xerces.jaxp.SAXParserImpl.setFeatures(Unknown Source)
       at org.apache.xerces.jaxp.SAXParserImpl.<init>(Unknown Source)
       at
org.apache.xerces.jaxp.SAXParserFactoryImpl.newSAXParserImpl(Unknown Source)
       at org.apache.xerces.jaxp.SAXParserFactoryImpl.setFeature(Unknown
Source)
       at
com.sun.xml.internal.bind.v2.util.XmlFactory.createParserFactory(XmlFactory.ja
va:136)