I think session attributes can used in multiple JVMs of the application by implementing the HttpSessionActivationListener.
It is not required to implement this interface to share the attributes across differnt JVMs.
Is it possible to share a session variable across two different applications?
Session level variables are not even accessible to other users in the same application. Then it is not possible to access it out side the application.