Medium severity · published Jan 15, 2026
CVE-2025-52987
Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed
6.1
CVSS
0.3%
EPSS
No
On KEV
Description
A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting with the interface under the attacker's control.
This issue affects all versions of Paragon Automation (Pathfinder, Planner, Insights) before 24.1.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PA
Paragon Automation (Pathfinder, Planner, Insights) · Juniper Networks
before 24.1.1 · source: vendor
PA
Paragon Automation · Juniper
before 24.1.1 · source: NVD
Affected product
PA
Paragon Automation (Pathfinder, Planner, Insights)
Juniper Networks