Tomcat 7.055 for BO 4.1

I was recently informed from our network security team that the tomcat we have installed with SAP BO 4.1 SP2 is out of date. I was able to upgrade the tomcat independently from 6 to 7.0.32. But I was told the vulnerability exists in versions older than 7.0.55

Does anyone know if there is a compatibility issue with this or any newer version of BO. If there isnt where can i download and install a newer version of tomcat.

I tried and downloaded the jre-8u25-windows-x64.exe from Java which upgraded the JVM to 1.8.0_25 but my tomcat is still at a 7.0.32

Thank you,

Zac