We are running UCCE 11.5.x setup. But in the cisco document for optional, we can upgrade to the latest version “ Upgrade Tomcat to version 7.0 build releases. (That is, only version 7.0 build releases work with this tool.) You may choose to upgrade to newer builds of Tomcat release 7.0 to keep up with the latest security fixes.”
I am confusing in the UCCE 11.5 Compatibility Matrix - Upgrading Apache Tomcat on Unified CCE servers is not universally supported. Follow our documentation if you need to upgrade Apache Tomcat.