We recently upgraded from 14.x to 17.1 We are being pressed by IT Security to update Apache Tomcat in a short time frame because of known vulnerabilities.
What is the highest version we can upgrade both Apache Tomcat and Java to?
CA Asset Portfolio Management 17.1
See the APM 17.0/17.1 online documentation under the Third Party Common Components section:
Apache Tomcat 8.5.6 and Java 1.8.0_112 (32-bit) are certified with APM 17.x releases.