It probably uses SuiteTalk, if it's anything like their SSIS connector. We found that we needed to add additional permissions on the roles for SuiteTalk to enable them to work with CDATA.