Apache Tomcat version 9.0.118 is included in Configuration Automation 12.6 CU2 release 12.9.0.221.
Version 9.0.118 can be upgraded upon request.
Configuration Automation 12.9 CU2 Release 12.9.0.221
Vulnerability are found with Apache Tomcat 9.0.118 needs to be upgraded.
The upgrade is possible with a fix from Broadcom Support.
If you need to upgrade Apache Tomcat from 9.0.118 to 9.0.120, then please open a new support case, reference KB450817, and request this fix.
CA Configuration Automation 12.9. CU2 Release Notes - CCA version 12.9 CU2 Release Notes confirming Apache Tomcat 9.0.118 is included.