diff --git a/assemblies/features/enterprise/pom.xml b/assemblies/features/enterprise/pom.xml
index d8c7c6999d3..70c444cb92d 100644
--- a/assemblies/features/enterprise/pom.xml
+++ b/assemblies/features/enterprise/pom.xml
@@ -237,7 +237,7 @@
         <dependency>
             <groupId>org.codehaus.woodstox</groupId>
             <artifactId>stax2-api</artifactId>
-            <version>4.3.0</version>
+            <version>${stax2.version}</version>
         </dependency>
         <dependency>
             <groupId>jakarta.xml.bind</groupId>
diff --git a/assemblies/features/enterprise/src/main/feature/feature.xml b/assemblies/features/enterprise/src/main/feature/feature.xml
index fa04c08d471..3f247db2184 100644
--- a/assemblies/features/enterprise/src/main/feature/feature.xml
+++ b/assemblies/features/enterprise/src/main/feature/feature.xml
@@ -219,7 +219,7 @@ com.atomikos.icatch.log_base_dir=${karaf.data}/atomikos
         <bundle>mvn:com.fasterxml.jackson.core/jackson-databind/${jackson.version}</bundle>
         <bundle>mvn:com.fasterxml.jackson.dataformat/jackson-dataformat-xml/${jackson.version}</bundle>
         <!-- StAX2 API (required by jackson-dataformat-xml) -->
-        <bundle>mvn:org.codehaus.woodstox/stax2-api/4.3.0</bundle>
+        <bundle>mvn:org.codehaus.woodstox/stax2-api/${stax2.version}</bundle>
         <!-- Hibernate ORM core: wrapped to convert incorrectly mandatory imports to optional.
              Vendor-specific (oracle, ibm, postgresql, checkerframework, jonas), CDI
              (jakarta.enterprise.*, jakarta.inject), Bean Validation (jakarta.validation.*),
diff --git a/assemblies/features/specs/src/main/feature/feature.xml b/assemblies/features/specs/src/main/feature/feature.xml
index aa40a63b7dd..3e96f5088d5 100644
--- a/assemblies/features/specs/src/main/feature/feature.xml
+++ b/assemblies/features/specs/src/main/feature/feature.xml
@@ -109,9 +109,9 @@
     </feature>
 
     <!-- stax2 -->
-    <feature name="stax2" version="4.2.2">
-        <bundle>mvn:org.codehaus.woodstox/stax2-api/4.2.2</bundle>
-        <bundle>mvn:com.fasterxml.woodstox/woodstox-core/6.4.0</bundle>
+    <feature name="stax2" version="${stax2.version}">
+        <bundle>mvn:org.codehaus.woodstox/stax2-api/${stax2.version}</bundle>
+        <bundle>mvn:com.fasterxml.woodstox/woodstox-core/${woodstox.version}</bundle>
     </feature>
 
     <!-- saaj -->
diff --git a/pom.xml b/pom.xml
index 8ac230876fd..f8887978faa 100644
--- a/pom.xml
+++ b/pom.xml
@@ -369,7 +369,9 @@
 
         <sling.commons.johnzon.version>1.2.16</sling.commons.johnzon.version>
         <sshd.version>2.19.0</sshd.version>
+        <stax2.version>4.3.0</stax2.version>
         <struts.bundle.version>1.3.10_1</struts.bundle.version>
+        <woodstox.version>6.4.0</woodstox.version>
         <xbean.version>4.31</xbean.version>
         <javax.mail.version>1.4.7</javax.mail.version>