= 8.6.0
≤ 8.5.1
Zimbra Collaboration before 8.6.0 patch5 has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.