Zimbra developers released security updates to fix vulnerabilities that affect all versions of Zimbra. An attacker could exploit some of these vulnerabilities to trigger data manipulation, security restriction bypass, cross-site scripting and sensitive information disclosure on the targeted system.

Security vulnerability is fixed in the following Zimbra versions:

• Zimbra Daffodil 10.0.6
• Zimbra 9.0.0 Kepler Patch 38 GA
• Zimbra 8.8.15 Joule Patch 45 GA

Source: zimbra.com