CVE-2021-42258Vulnerability
BQE BillQuick Web Suite SQL Injection Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 5 years ago
CISA KEVAdded 3 Nov 2021
Fix due 17 Nov 2021
Used by ransomware: knownCISA KEV catalogue
Fix due 17 Nov 2021
Used by ransomware: knownCISA KEV catalogue
EPSS74.4%
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Hackers Are Exploiting a Vulnerability in Billing Software“Hackers were able to successfully exploit CVE-2021-42258 - using it to gain initial access to a US engineering company - and deploy ransomware across the victim’s network.”
Indicators reported together
named in the same reportsAlso named with it: CVE-2021-42344, CVE-2021-42345, CVE-2021-42346, CVE-2021-42571, CVE-2021-42572, CVE-2021-42573, CVE-2021-42741, CVE-2021-42742
Thanks — we review every report.