Four flaws, two rated critical, put a spotlight on the software layer that governs multi-tenant backup operations and Salesforce protection.