CVE-2021-42258 — BQE BillQuick Web Suite SQL Injection Vulnerability

Known ransomware use CISA KEV listed Added November 3, 2021 Remediate by November 17, 2021

Description

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-42258

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer