# Q rel ESA-2025-06 **URL:** \ **Category:** Elastic Security\ **Created:** [March 11, 2025, 9:46am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692 "2025-03-11T09:46:43Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![fizek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fizek/32/141952_2.png) [@fizek](https://discuss.elastic.co/u/fizek)\ **Post date:** [March 11, 2025, 9:46am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/1 "2025-03-11T09:46:43Z")
[ESA-2025-06](https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441) is a security advisory about a prototype pollution vulnerability. This avisory references the following CVE ID : **CVE-2025-25012** Is self-hosted kibana in enterprise version affected? It is not clear in above advisory. Thank you. ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [March 11, 2025, 9:54am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/2 "2025-03-11T09:54:14Z")
Hi @fizek, Welcome to the community! To confirm are you running a self-hosted Kibana instance running with an enterprise license? Which version are you running? ---
**Author:** ![fizek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fizek/32/141952_2.png) [@fizek](https://discuss.elastic.co/u/fizek)\ **Post date:** [March 11, 2025, 10:00am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/3 "2025-03-11T10:00:29Z")
Yes, i'm running a self-hosted Kibana instance with an enterprise license in version 8.17.1. I wonder do I need to upgrade whole stack to latest 8.17.3. ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [March 11, 2025, 10:26am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/4 "2025-03-11T10:26:57Z")
No worries @fizek. Let me follow up internally and confirm. I'll keep you posted. ---
**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\ **Post date:** [March 11, 2025, 1:17pm UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/5 "2025-03-11T13:17:26Z")
Hi @fizek, I've followed up and since you have an enterprise version we recommend either upgrading or following the `xpack.integration_assistant.enabled: false` remediation as covered in the announcement [here](https://discuss.elastic.co/t/kibana-8-17-3-security-update-esa-2025-06/375441). Hope that helps! ---
**Author:** ![fizek](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/fizek/32/141952_2.png) [@fizek](https://discuss.elastic.co/u/fizek)\ **Post date:** [March 11, 2025, 2:08pm UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/6 "2025-03-11T14:08:12Z")
I know I already marked your answer as the solution, but I have an additional (related) question. What does `xpack.integration_assistant.enabled: false` actually do? I couldn't find anything relevant in the documentation. ---
**Author:** ![Ahmed\_Khan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ahmed_khan/32/132425_2.png) [@Ahmed\_Khan](https://discuss.elastic.co/u/Ahmed_Khan)\ **Post date:** [March 12, 2025, 5:56am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/7 "2025-03-12T05:56:15Z")
> **[Elastic Support Hub](https://support.elastic.co/knowledge/4aff04c0)** ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 9, 2025, 5:57am UTC](https://discuss.elastic.co/t/q-rel-esa-2025-06/375692/8 "2025-04-09T05:57:03Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.