In 2023, a significant zero-day vulnerability (reflected Cross-Site Scripting or XSS) was identified as affecting Zimbra Collaboration Suite Version 8.8.15, which was reportedly exploited to target government webmail portals.
There are rumors that the National Police may migrate to a instance or a more secure Moodle + Mattermost stack for real-time chat. However, as of 2024–2025, Zimbra on police.gov.ua remains the official standard for internal email. zimbra police gov ua