EUVD-2026-35320

🗓️ 09 Jun 2026 03:47:46Reported by EUVDType

Specially crafted HTTP requests may cause a denial-of-service in Micrometer core and Jetty integrations.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for July 2026.	5 Aug 202607:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Micrometer vulnerability that could allow Denial of Service (Dos) attacks	26 Jun 202618:37	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple D.o.S. issues in Micrometer [CVE-2026-40983, CVE-2026-40984]	27 Jul 202620:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by a Denial-of-Service (DoS) vulnerability in Micrometer (CVE-2026-40984)	18 Aug 202609:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm
Atlassian	DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Bamboo Data Center	7 Aug 202616:30	–	atlassian
Atlassian	DoS (Denial of Service) io.micrometer:micrometer-core Dependency in Crowd Data Center	7 Aug 202616:30	–	atlassian
BDU FSTEC	The vulnerability of the Micrometer library in the Spring Boot web application framework allows a attacker to cause a service failure.	15 Jul 202600:00	–	bdu_fstec
Chainguard	CVE-2026-40984 vulnerabilities	7 Aug 202620:22	–	cgr

[
  {
    "enisaIdVendor": [
      {
        "id": "9a18a244-790d-3ee6-92cb-cb9a28985224",
        "vendor": {
          "name": "Spring"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0010efb1-921b-357d-b9e5-fd987f22a627",
        "product": {
          "name": "Micrometer",
          "vendor": {
            "name": "Spring"
          }
        },
        "product_version": "1.15.0 <1.15.12"
      },
      {
        "id": "463f6bf4-3334-3eeb-bf0c-319d3ab0ea88",
        "product": {
          "name": "Micrometer",
          "vendor": {
            "name": "Spring"
          }
        },
        "product_version": "1.16.0 <1.16.6"
      },
      {
        "id": "85d1094d-8a7a-3c79-bf2f-cb1ca6c0f680",
        "product": {
          "name": "Micrometer",
          "vendor": {
            "name": "Spring"
          }
        },
        "product_version": "1.13.0 <1.13.19"
      },
      {
        "id": "c1855eac-6f81-3722-be5b-c456c64854cd",
        "product": {
          "name": "Micrometer",
          "vendor": {
            "name": "Spring"
          }
        },
        "product_version": "1.14.0 <1.14.16"
      },
      {
        "id": "c35bbde2-87ef-396f-b573-8cfa6b2fddf6",
        "product": {
          "name": "Micrometer",
          "vendor": {
            "name": "Spring"
          }
        },
        "product_version": "1.9.0 <1.9.18"
      }
    ]
  }
]

Source	Link
spring	www.spring.io/security/cve-2026-40984

09 Jun 2026 03:47Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.00763

SSVC