The Remedy AR System Server includes a Jetty server for REST API. The version of the integrated jetty is 8.1.15.v20140411. As the name says this version is from 2014 - more than 3 years old!
One of my customer made a vulnerability scan and found a "Mart Bay Jetty Multiple Vulnerabilities" which is caused by this old jetty version.
Please include actual versions of jetty in the upcoming releases of AR System Server