The 14.3.x Symantec Endpoint Protection Manager (SEPM) uses Apache Tomcat and you have the following questions.
Symantec Endpoint Protection 14.3.x
The Tomcat component that is built into the SEPM is updated with periodic releases of Symantec Endpoint Protection (SEP). Information on updates can often be found in the release notes. We recommend that you always use the latest release of SEP to take advantage of the latest enhancements and improvements.
To find the version of Tomcat the SEPM is currently using, follow these steps:
Manually upgrading the embedded components including Tomcat, PHP, java and others "in use" by the On Prem SEPM is not supported. Upgrading the SEPM to the latest version available is the only way to upgrade the embedded components to the latest versions available.