The Java SE 6 documentation on Object Serialization states the following about the uses of Java serialization: Serialization is used for lightweight persistence and for communication via sockets or ...

Java Remote Method Invocation (RMI) gives clients access to objects in the server virtual machine (VM) in one of two ways: by reference or by value. To access a remote object by reference, the object ...

Researchers from Foxglove Security have reportedly discovered a remote code execution hole in the widely used Apache Commons library, thanks to the insecure method in which Java unserializes objects, ...