Symantec would not support a manual Tomcat upgrade as SCSP\SDCS uses an embedded Tomcat version which is customized according to our needs.
List of SCSP\SDCS releases with corresponding Apache Tomcat versions:
SCSP Version 220.127.116.118 (MP1) Apache Tomcat v7.0.28
SCSP Version 18.104.22.1680 (MP2) Apache Tomcat v7.0.34
SCSP Version 22.214.171.1249 (MP3) Apache Tomcat v7.0.39
SCSP Version 126.96.36.1991 (MP4) Apache Tomcat v7.0.42
SCSP Version 188.8.131.525 (MP5) Apache Tomcat v7.0.52
SCSP Version 5.2.9.xxx (MP6) Apache Tomcat v7.0.56
SDCS Version 184.108.40.2060 Apache Tomcat v7.0.42
SDCS Version 220.127.116.114 (MP1) Apache Tomcat v7.0.54
Please upgrade to any of the above mentioned SCSP\SDCS version to upgrade the apache tomcat version.
Refer below article for the upgrade procedure:
1. How to upgrade SCSP to a newer release
2. You would like to know data to backup in order to be able to rebuild Symantec Critical System Protection (SCSP) Server in the case of a failure.