Common Weakness Enumeration

    CWE Definition / CWE-579

    CWE-579: J2EE Bad Practices: Non-serializable Object Stored in Session

    The product stores a non-serializable object as an HttpSession attribute, which can hurt reliability.

    Published:15 Dec 2006
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-573: Improper Following of Specification by Caller

    CWE-579: J2EE Bad Practices: Non-serializable Object Stored… | CVE-DB