Medium severity6.1NVD Advisory· Published Jan 15, 2026· Updated Jun 17, 2026
CVE-2025-52987
CVE-2025-52987
Description
A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting with the interface under the attacker's control.
This issue affects all versions of Paragon Automation (Pathfinder, Planner, Insights) before 24.1.1.
Affected products
5<24.1.1+ 1 more
- (no CPE)range: <24.1.1
- cpe:2.3:a:juniper:paragon_automation:*:*:*:*:*:*:*:*range: <24.1.1
- Range: <24.1.1
- Range: <24.1.1
- Juniper Networks/Paragon Automation (Pathfinder, Planner, Insights)v5Range: 0
Patches
Vulnerability mechanics
References
2- kb.juniper.net/JSA103145nvdVendor Advisory
- supportportal.juniper.netnvdPermissions Required
News mentions
0No linked articles in our index yet.