Whilst the webservices_rest can support CORS it is not possible to manually modify the web.xml to add this as it is packed with the webservices_rest.war
Engineering has created a test patch that adds CORS to the webservices_rest probe
see DE409698
How to enable CORS on Tomcat for WASP (uimapi)
https://knowledge.broadcom.com/external/article?articleId=187756