Unrated severityNVD Advisory· Published Jan 15, 2026· Updated Jan 16, 2026
Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed
CVE-2025-52987
Description
A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting with the interface under the attacker's control.
This issue affects all versions of Paragon Automation (Pathfinder, Planner, Insights) before 24.1.1.
Affected products
2- Range: <24.1.1
- Juniper Networks/Paragon Automation (Pathfinder, Planner, Insights)v5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- kb.juniper.net/JSA103145mitrevendor-advisory
- supportportal.juniper.netmitrevendor-advisory
News mentions
0No linked articles in our index yet.