Update Tomcat

I am getting alerts from Microsoft 365 Defender regarding the servers Wyse Managament Suite is installed on, the alerts are in regards vulnerabilities with Tomcat 9.0.53.0. The following CVEs were stated:

CVE-2022-23181

CVE-2021-42340

Is it possible to update Tomcat to another version or would it need to be updated via the WMS update?