Security News Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities TheHackerNews Daniel Bender Feb 10, 2025 Zimbra has patched CVE-2025-25064, a critical SQL injection flaw (CVSS 9.8), and other security bugs. Update now to protect against exploits.