The vulnerability of the Adobe Experience Manager content and media data management system lies in the improper limitation of XML links to external objects, which allows attackers to perform XXE attacks.

The vulnerability of the Adobe Media Encoder application relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow a remote attacker to perform XXE attacks...