CVE-2017-10899: Ark-Web A-Reserve

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in the A-Reserve and A-Reserve for MT cloud versions 3.8.6 and earlier allows an attacker to execute arbitrary SQL commands via unspecified vectors.

Affected products

• Ark-Web A-Reserve: up to and including 3.8.6

Published 2017-12-01. Last modified 2026-06-17.