VYPR

stateful session bean

by Apache

CVEs (1)

  • CVE-2026-111241Nov 10, 2026
    risk 0.00cvss —epss —

    When a non-default stateful session bean passivation strategy is configured, passivated bean state is written to predictably named files in the shared system temporary directory, reusing files that already exist there, and is deserialized on activation. A local attacker who can…