CVE-2025-52987mediumCWE-1021

CVE-2025-52987: medium-severity vulnerability in Juniper Networks Paragon Automation…

Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

Published · Updated

Follow this CVE+ Monitor Paragon Automation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.1epss 0.3%
A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting with the interface under the attacker's control.  This issue affects all versions of Paragon Automation (Pathfinder, Planner, Insights) before 24.1.1.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/RE:M
Affected products
Juniper Networks · Paragon Automation (Pathfinder, Planner, Insights)