CVE-2025-52987: Paragon Automation: A clickjacking vulnerability in the web server configuration has been addressed

Q: What is the severity of CVE-2025-52987?

CVE-2025-52987 is classified as a medium severity vulnerability.

Q: How do I fix CVE-2025-52987?

To fix CVE-2025-52987, ensure that you configure the web server to include appropriate X-Frame-Options headers.

Q: What systems are affected by CVE-2025-52987?

CVE-2025-52987 affects Juniper Networks Paragon Automation versions up to 24.1.1.

Q: What type of vulnerability is CVE-2025-52987?

CVE-2025-52987 is a clickjacking vulnerability.

Q: What risk does CVE-2025-52987 pose?

CVE-2025-52987 poses a risk of unauthorized actions being performed by users due to the lack of frame options.

Published Jan 15, 2026

Updated

A clickjacking vulnerability exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) due to the application's failure to set appropriate X-Frame-Options and X-Content-Type HTTP headers. This vulnerability allows an attacker to trick users into interacting with the interface under the attacker's control.

This issue affects all versions of Paragon Automation (Pathfinder, Planner, Insights) before 24.1.1.

Affected Software

2 affected components

Juniper Networks Paragon Automation<24.1.1

Juniper Paragon Automation<24.1.1

Remediation

Information

The following software releases have been updated to resolve this specific issue: 24.1.1, and all subsequent releases.

Event History

Jan 15, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-52987?

CVE-2025-52987 is classified as a medium severity vulnerability.

How do I fix CVE-2025-52987?