PT-2026-3103 · Juniper Networks · Paragon Automation+3

Publicado 2026-01-15 · Atualizado 2026-01-16 · CVE-2025-52987

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Juniper Networks Paragon Automation (Pathfinder, Planner, Insights) versions prior to 24.1.1

Description A clickjacking issue exists in the web portal of Juniper Networks Paragon Automation (Pathfinder, Planner, Insights). This is due to the application not setting appropriate X-Frame-Options and X-Content-Type HTTP headers, which could allow an attacker to trick users into interacting with the interface under the attacker’s control.

Recommendations Update to version 24.1.1 or later.

Correção

Clickjacking

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

CVE-2025-52987

Produtos afetados

Insights

Paragon Automation

Pathfinder

Planner

Referências · 7

• https://supportportal.juniper.net · Aviso do Fabricante
• https://twitter.com/transilienceai/status/2012004831498813823 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2011926056945795326 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-52987 · Aviso do Fabricante
• https://kb.juniper.net/JSA103145 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-52987 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2011997287803654506 · Publicação no Twitter