Can an adversary fingerprint the webserver from the http responses?

The HTTP Response does not contain the version details of the server and the X-Powered-By header is removed. We have made some changes since v12.1 in this regard too. Now, it is more securer than ever to use the EPC Application.