Enterprise Object Broker is an alternative to EJB. It is the same idea but making the difference between remote and local objects nearly invisible.
Make your object model from normal Java interfaces and code an impl that fits it
There are no reported vulnerabilities